# Flog Txt Version 1 # Analyzer Version: 2.3.2 # Analyzer Build Date: Jan 8 2019 16:19:15 # Log Creation Date: 18.01.2019 12:26:18.895 Process: id = "1" image_name = "tree.exe" filename = "c:\\users\\ciihmnxmn6ps\\desktop\\tree.exe" page_root = "0x75e7b000" os_pid = "0xe14" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe\" " cur_dir = "C:\\Users\\CIiHmnxMn6Ps\\Desktop\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013da5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1 start_va = 0xc70000 end_va = 0xc8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c70000" filename = "" Region: id = 2 start_va = 0xc90000 end_va = 0xc90fff entry_point = 0x0 region_type = private name = "private_0x0000000000c90000" filename = "" Region: id = 3 start_va = 0xca0000 end_va = 0xcb3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ca0000" filename = "" Region: id = 4 start_va = 0xcc0000 end_va = 0xcfffff entry_point = 0x0 region_type = private name = "private_0x0000000000cc0000" filename = "" Region: id = 5 start_va = 0xd00000 end_va = 0xdfffff entry_point = 0x0 region_type = private name = "private_0x0000000000d00000" filename = "" Region: id = 6 start_va = 0xe00000 end_va = 0xe03fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e00000" filename = "" Region: id = 7 start_va = 0xe10000 end_va = 0xe10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e10000" filename = "" Region: id = 8 start_va = 0xe20000 end_va = 0xe21fff entry_point = 0x0 region_type = private name = "private_0x0000000000e20000" filename = "" Region: id = 9 start_va = 0x1110000 end_va = 0x1175fff entry_point = 0x1110000 region_type = mapped_file name = "tree.exe" filename = "\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\tree.exe") Region: id = 10 start_va = 0x776b0000 end_va = 0x77828fff entry_point = 0x776b0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 11 start_va = 0x7e580000 end_va = 0x7e5a2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007e580000" filename = "" Region: id = 12 start_va = 0x7e5ab000 end_va = 0x7e5abfff entry_point = 0x0 region_type = private name = "private_0x000000007e5ab000" filename = "" Region: id = 13 start_va = 0x7e5ac000 end_va = 0x7e5acfff entry_point = 0x0 region_type = private name = "private_0x000000007e5ac000" filename = "" Region: id = 14 start_va = 0x7e5ad000 end_va = 0x7e5affff entry_point = 0x0 region_type = private name = "private_0x000000007e5ad000" filename = "" Region: id = 15 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 16 start_va = 0x7fff0000 end_va = 0x7ffc57b4ffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 17 start_va = 0x7ffc57b50000 end_va = 0x7ffc57d11fff entry_point = 0x7ffc57b50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 18 start_va = 0x7ffc57d12000 end_va = 0x7ffffffeffff entry_point = 0x0 region_type = private name = "private_0x00007ffc57d12000" filename = "" Region: id = 158 start_va = 0xf70000 end_va = 0xf7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f70000" filename = "" Region: id = 159 start_va = 0x5bab0000 end_va = 0x5bb22fff entry_point = 0x5bab0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 160 start_va = 0x5bb30000 end_va = 0x5bb7efff entry_point = 0x5bb30000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 161 start_va = 0x5baa0000 end_va = 0x5baa7fff entry_point = 0x5baa0000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 162 start_va = 0x1280000 end_va = 0x137ffff entry_point = 0x0 region_type = private name = "private_0x0000000001280000" filename = "" Region: id = 163 start_va = 0x74f40000 end_va = 0x7502ffff entry_point = 0x74f40000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 164 start_va = 0x75190000 end_va = 0x75305fff entry_point = 0x75190000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 165 start_va = 0xc70000 end_va = 0xc7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c70000" filename = "" Region: id = 166 start_va = 0xe30000 end_va = 0xeedfff entry_point = 0xe30000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 167 start_va = 0x746b0000 end_va = 0x74740fff entry_point = 0x746b0000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 168 start_va = 0x7e480000 end_va = 0x7e57ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007e480000" filename = "" Region: id = 169 start_va = 0xc80000 end_va = 0xc83fff entry_point = 0x0 region_type = private name = "private_0x0000000000c80000" filename = "" Region: id = 170 start_va = 0xef0000 end_va = 0xf2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ef0000" filename = "" Region: id = 171 start_va = 0xf80000 end_va = 0x107ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f80000" filename = "" Region: id = 172 start_va = 0x74750000 end_va = 0x747a8fff entry_point = 0x74750000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 173 start_va = 0x747b0000 end_va = 0x747b9fff entry_point = 0x747b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 174 start_va = 0x747c0000 end_va = 0x747ddfff entry_point = 0x747c0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 175 start_va = 0x74a00000 end_va = 0x74aabfff entry_point = 0x74a00000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 176 start_va = 0x76f20000 end_va = 0x76fddfff entry_point = 0x76f20000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 177 start_va = 0x772b0000 end_va = 0x772f2fff entry_point = 0x772b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 178 start_va = 0x77550000 end_va = 0x775cafff entry_point = 0x77550000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 179 start_va = 0x7e5a8000 end_va = 0x7e5aafff entry_point = 0x0 region_type = private name = "private_0x000000007e5a8000" filename = "" Region: id = 180 start_va = 0x1540000 end_va = 0x154ffff entry_point = 0x0 region_type = private name = "private_0x0000000001540000" filename = "" Thread: id = 1 os_tid = 0xe18 [0041.390] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0041.390] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x75190000 [0041.390] GetProcAddress (hModule=0x75190000, lpProcName=0x113effc) returned 0x75243ae0 [0041.391] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x75190000 [0041.391] GetProcAddress (hModule=0x75190000, lpProcName="FlsAlloc") returned 0x75246530 [0041.391] GetProcAddress (hModule=0x75190000, lpProcName="FlsSetValue") returned 0x75243770 [0041.393] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x75190000 [0041.393] GetProcAddress (hModule=0x75190000, lpProcName="InitializeCriticalSectionEx") returned 0x75243ae0 [0041.393] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x75190000 [0041.393] GetProcAddress (hModule=0x75190000, lpProcName="FlsAlloc") returned 0x75246530 [0041.393] GetLastError () returned 0x0 [0041.393] GetProcAddress (hModule=0x75190000, lpProcName="FlsGetValue") returned 0x7523a7b0 [0041.393] GetProcAddress (hModule=0x75190000, lpProcName="FlsSetValue") returned 0x75243770 [0041.394] SetLastError (dwErrCode=0x0) [0041.396] GetStartupInfoW (in: lpStartupInfo=0xdff730 | out: lpStartupInfo=0xdff730*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0041.396] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0041.396] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0041.396] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0041.396] GetCommandLineA () returned="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe\" " [0041.396] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe\" " [0041.396] GetACP () returned 0x4e4 [0041.396] IsValidCodePage (CodePage=0x4e4) returned 1 [0041.396] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xdff750 | out: lpCPInfo=0xdff750) returned 1 [0041.396] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xdff018 | out: lpCPInfo=0xdff018) returned 1 [0041.396] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdff62c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0041.396] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdff62c, cbMultiByte=256, lpWideCharStr=0xdfedb8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0041.396] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0xdff02c | out: lpCharType=0xdff02c) returned 1 [0041.397] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdff62c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0041.397] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdff62c, cbMultiByte=256, lpWideCharStr=0xdfed68, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĒĀ") returned 256 [0041.397] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x75190000 [0041.397] GetProcAddress (hModule=0x75190000, lpProcName="LCMapStringEx") returned 0x75233690 [0041.397] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĒĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0041.397] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĒĀ", cchSrc=256, lpDestStr=0xdfeb58, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0041.397] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0xdff52c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x5b\x84\x8c\x15\x68\xf7\xdf", lpUsedDefaultChar=0x0) returned 256 [0041.397] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdff62c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0041.397] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdff62c, cbMultiByte=256, lpWideCharStr=0xdfed88, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0041.397] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0041.397] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0xdfeb78, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0041.397] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0xdff42c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x5b\x84\x8c\x15\x68\xf7\xdf", lpUsedDefaultChar=0x0) returned 256 [0041.398] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x116e118, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\tree.exe")) returned 0x26 [0041.398] RtlInitializeSListHead (in: ListHead=0x116ded0 | out: ListHead=0x116ded0) [0041.398] GetLastError () returned 0x0 [0041.398] SetLastError (dwErrCode=0x0) [0041.398] GetEnvironmentStringsW () returned 0x1293f68* [0041.398] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1331, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1331 [0041.398] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1331, lpMultiByteStr=0x1292728, cbMultiByte=1331, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1331 [0041.398] FreeEnvironmentStringsW (penv=0x1293f68) returned 1 [0041.400] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x74f40000 [0041.400] GetProcAddress (hModule=0x74f40000, lpProcName="FlsAlloc") returned 0x74f5a330 [0041.400] GetProcAddress (hModule=0x74f40000, lpProcName="FlsFree") returned 0x74f5f400 [0041.400] GetProcAddress (hModule=0x74f40000, lpProcName="FlsGetValue") returned 0x74f57580 [0041.400] GetProcAddress (hModule=0x74f40000, lpProcName="FlsSetValue") returned 0x74f59910 [0041.401] GetProcAddress (hModule=0x74f40000, lpProcName="InitializeCriticalSectionEx") returned 0x74f66030 [0041.401] GetProcAddress (hModule=0x74f40000, lpProcName="InitOnceExecuteOnce") returned 0x75243090 [0041.401] GetProcAddress (hModule=0x74f40000, lpProcName="CreateEventExW") returned 0x74f65f90 [0041.401] GetProcAddress (hModule=0x74f40000, lpProcName="CreateSemaphoreW") returned 0x74f66000 [0041.401] GetProcAddress (hModule=0x74f40000, lpProcName="CreateSemaphoreExW") returned 0x74f65ff0 [0041.401] GetProcAddress (hModule=0x74f40000, lpProcName="CreateThreadpoolTimer") returned 0x74f5a690 [0041.401] GetProcAddress (hModule=0x74f40000, lpProcName="SetThreadpoolTimer") returned 0x776e40f0 [0041.401] GetProcAddress (hModule=0x74f40000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x776dd630 [0041.401] GetProcAddress (hModule=0x74f40000, lpProcName="CloseThreadpoolTimer") returned 0x776decf0 [0041.401] GetProcAddress (hModule=0x74f40000, lpProcName="CreateThreadpoolWait") returned 0x74f65720 [0041.401] GetProcAddress (hModule=0x74f40000, lpProcName="SetThreadpoolWait") returned 0x776de140 [0041.401] GetProcAddress (hModule=0x74f40000, lpProcName="CloseThreadpoolWait") returned 0x776deb60 [0041.401] GetProcAddress (hModule=0x74f40000, lpProcName="FlushProcessWriteBuffers") returned 0x77719990 [0041.401] GetProcAddress (hModule=0x74f40000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77715540 [0041.402] GetProcAddress (hModule=0x74f40000, lpProcName="GetCurrentProcessorNumber") returned 0x77709dc0 [0041.402] GetProcAddress (hModule=0x74f40000, lpProcName="CreateSymbolicLinkW") returned 0x74f80a40 [0041.402] GetProcAddress (hModule=0x74f40000, lpProcName="GetCurrentPackageId") returned 0x75243c90 [0041.402] GetProcAddress (hModule=0x74f40000, lpProcName="GetTickCount64") returned 0x74f58710 [0041.402] GetProcAddress (hModule=0x74f40000, lpProcName="GetFileInformationByHandleEx") returned 0x74f810d0 [0041.402] GetProcAddress (hModule=0x74f40000, lpProcName="SetFileInformationByHandle") returned 0x74f66520 [0041.402] GetProcAddress (hModule=0x74f40000, lpProcName="GetSystemTimePreciseAsFileTime") returned 0x74f665e0 [0041.402] GetProcAddress (hModule=0x74f40000, lpProcName="InitializeConditionVariable") returned 0x77709da0 [0041.402] GetProcAddress (hModule=0x74f40000, lpProcName="WakeConditionVariable") returned 0x77715860 [0041.402] GetProcAddress (hModule=0x74f40000, lpProcName="WakeAllConditionVariable") returned 0x77713370 [0041.402] GetProcAddress (hModule=0x74f40000, lpProcName="SleepConditionVariableCS") returned 0x752c2850 [0041.402] GetProcAddress (hModule=0x74f40000, lpProcName="InitializeSRWLock") returned 0x77709da0 [0041.402] GetProcAddress (hModule=0x74f40000, lpProcName="AcquireSRWLockExclusive") returned 0x776e6db0 [0041.402] GetProcAddress (hModule=0x74f40000, lpProcName="TryAcquireSRWLockExclusive") returned 0x776daca0 [0041.402] GetProcAddress (hModule=0x74f40000, lpProcName="ReleaseSRWLockExclusive") returned 0x776e6c60 [0041.403] GetProcAddress (hModule=0x74f40000, lpProcName="SleepConditionVariableSRW") returned 0x752c28a0 [0041.403] GetProcAddress (hModule=0x74f40000, lpProcName="CreateThreadpoolWork") returned 0x74f5e9f0 [0041.403] GetProcAddress (hModule=0x74f40000, lpProcName="SubmitThreadpoolWork") returned 0x776e6a40 [0041.403] GetProcAddress (hModule=0x74f40000, lpProcName="CloseThreadpoolWork") returned 0x776d2500 [0041.403] GetProcAddress (hModule=0x74f40000, lpProcName="CompareStringEx") returned 0x74f5fa30 [0041.403] GetProcAddress (hModule=0x74f40000, lpProcName="GetLocaleInfoEx") returned 0x74f5a000 [0041.403] GetProcAddress (hModule=0x74f40000, lpProcName="LCMapStringEx") returned 0x74f59970 [0041.403] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x74f40000 [0041.403] GetProcAddress (hModule=0x74f40000, lpProcName="InitializeConditionVariable") returned 0x77709da0 [0041.403] GetProcAddress (hModule=0x74f40000, lpProcName="SleepConditionVariableCS") returned 0x752c2850 [0041.403] GetProcAddress (hModule=0x74f40000, lpProcName="WakeAllConditionVariable") returned 0x77713370 [0041.403] RtlInitializeConditionVariable (in: ConditionVariable=0x116deac | out: ConditionVariable=0x116deac) [0041.404] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0041.404] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x111e1c3) returned 0x0 [0041.405] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x74f40000 [0041.405] GetProcAddress (hModule=0x74f40000, lpProcName="AreFileApisANSI") returned 0x74f5f9b0 [0041.405] LoadLibraryExW (lpLibFileName="api-ms-win-core-string-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x75190000 [0041.405] GetProcAddress (hModule=0x75190000, lpProcName="CompareStringEx") returned 0x75234500 [0041.405] GetProcAddress (hModule=0x75190000, lpProcName="EnumSystemLocalesEx") returned 0x7524e350 [0041.405] LoadLibraryExW (lpLibFileName="api-ms-win-core-datetime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x75190000 [0041.405] GetProcAddress (hModule=0x75190000, lpProcName="GetDateFormatEx") returned 0x7529b710 [0041.405] GetProcAddress (hModule=0x75190000, lpProcName="GetLocaleInfoEx") returned 0x7522d3f0 [0041.405] GetProcAddress (hModule=0x75190000, lpProcName="GetTimeFormatEx") returned 0x7529b9e0 [0041.405] GetProcAddress (hModule=0x75190000, lpProcName="GetUserDefaultLocaleName") returned 0x75242510 [0041.405] GetProcAddress (hModule=0x75190000, lpProcName="IsValidLocaleName") returned 0x7522c210 [0041.405] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-obsolete-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x75190000 [0041.405] GetProcAddress (hModule=0x75190000, lpProcName="LCIDToLocaleName") returned 0x752404a0 [0041.405] GetProcAddress (hModule=0x75190000, lpProcName="LocaleNameToLCID") returned 0x752464c0 [0041.407] GetLastError () returned 0x0 [0041.407] SetLastError (dwErrCode=0x0) [0041.407] GetLastError () returned 0x0 [0041.407] SetLastError (dwErrCode=0x0) [0041.407] GetLastError () returned 0x0 [0041.407] SetLastError (dwErrCode=0x0) [0041.407] GetLastError () returned 0x0 [0041.407] SetLastError (dwErrCode=0x0) [0041.407] GetLastError () returned 0x0 [0041.407] SetLastError (dwErrCode=0x0) [0041.407] GetLastError () returned 0x0 [0041.407] SetLastError (dwErrCode=0x0) [0041.407] GetLastError () returned 0x0 [0041.407] SetLastError (dwErrCode=0x0) [0041.407] GetLastError () returned 0x0 [0041.408] SetLastError (dwErrCode=0x0) [0041.408] GetLastError () returned 0x0 [0041.408] SetLastError (dwErrCode=0x0) [0041.408] GetLastError () returned 0x0 [0041.408] SetLastError (dwErrCode=0x0) [0041.408] GetLastError () returned 0x0 [0041.408] SetLastError (dwErrCode=0x0) [0041.408] GetLastError () returned 0x0 [0041.408] SetLastError (dwErrCode=0x0) [0041.408] GetLastError () returned 0x0 [0041.408] SetLastError (dwErrCode=0x0) [0041.408] GetLastError () returned 0x0 [0041.408] SetLastError (dwErrCode=0x0) [0041.412] AreFileApisANSI () returned 1 [0041.412] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1291830, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0041.412] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1291830, cbMultiByte=-1, lpWideCharStr=0x1291878, cchWideChar=52 | out: lpWideCharStr="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\000000000.key") returned 52 [0041.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\000000000.key" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\000000000.key"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.412] GetLastError () returned 0x2 [0041.412] SetLastError (dwErrCode=0x2) [0041.412] GetLastError () returned 0x2 [0041.412] SetLastError (dwErrCode=0x2) [0041.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\000000000.key", nBufferLength=0x104, lpBuffer=0xdff338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\000000000.key", lpFilePart=0x0) returned 0x33 [0041.412] GetLastError () returned 0x2 [0041.412] SetLastError (dwErrCode=0x2) [0041.412] GetLastError () returned 0x2 [0041.412] SetLastError (dwErrCode=0x2) [0041.412] GetLastError () returned 0x2 [0041.412] SetLastError (dwErrCode=0x2) [0041.413] AreFileApisANSI () returned 1 [0041.413] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1291830, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0041.413] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1291830, cbMultiByte=-1, lpWideCharStr=0x1291878, cchWideChar=52 | out: lpWideCharStr="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\000000000.key") returned 52 [0041.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\000000000.key" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\000000000.key"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdff3d0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0041.414] GetFileType (hFile=0xa4) returned 0x1 [0041.414] GetLastError () returned 0x0 [0041.414] SetLastError (dwErrCode=0x0) [0041.414] GetLastError () returned 0x0 [0041.414] SetLastError (dwErrCode=0x0) [0041.415] GetLastError () returned 0x0 [0041.415] SetLastError (dwErrCode=0x0) [0041.415] GetLastError () returned 0x0 [0041.415] SetLastError (dwErrCode=0x0) [0041.415] GetLastError () returned 0x0 [0041.415] SetLastError (dwErrCode=0x0) [0041.415] GetLastError () returned 0x0 [0041.415] SetLastError (dwErrCode=0x0) [0041.415] GetLastError () returned 0x0 [0041.415] SetLastError (dwErrCode=0x0) [0041.415] GetLastError () returned 0x0 [0041.415] SetLastError (dwErrCode=0x0) [0041.415] GetLastError () returned 0x0 [0041.415] SetLastError (dwErrCode=0x0) [0041.415] GetLastError () returned 0x0 [0041.415] SetLastError (dwErrCode=0x0) [0041.416] GetLastError () returned 0x0 [0041.416] SetLastError (dwErrCode=0x0) [0041.416] LoadLibraryExW (lpLibFileName="api-ms-win-security-systemfunctions-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x77550000 [0041.416] GetProcAddress (hModule=0x77550000, lpProcName="SystemFunction036") returned 0x747b2530 [0041.416] SystemFunction036 (in: RandomBuffer=0xdff568, RandomBufferLength=0x4 | out: RandomBuffer=0xdff568) returned 1 [0041.416] SystemFunction036 (in: RandomBuffer=0xdff568, RandomBufferLength=0x4 | out: RandomBuffer=0xdff568) returned 1 [0041.417] GetLastError () returned 0x0 [0041.417] GetProcAddress (hModule=0x75190000, lpProcName="FlsGetValue") returned 0x7523a7b0 [0041.417] SetLastError (dwErrCode=0x0) [0041.417] WriteFile (in: hFile=0xa4, lpBuffer=0xdfe094*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0xdfe08c, lpOverlapped=0x0 | out: lpBuffer=0xdfe094*, lpNumberOfBytesWritten=0xdfe08c*=0x10, lpOverlapped=0x0) returned 1 [0041.426] CloseHandle (hObject=0xa4) returned 1 [0041.428] GetLastError () returned 0x0 [0041.428] SetLastError (dwErrCode=0x0) [0041.428] GetLastError () returned 0x0 [0041.428] SetLastError (dwErrCode=0x0) [0041.428] GetLastError () returned 0x0 [0041.428] SetLastError (dwErrCode=0x0) [0041.428] GetLastError () returned 0x0 [0041.428] SetLastError (dwErrCode=0x0) [0041.428] GetLastError () returned 0x0 [0041.428] SetLastError (dwErrCode=0x0) [0041.428] GetLastError () returned 0x0 [0041.428] SetLastError (dwErrCode=0x0) [0041.428] GetStartupInfoW (in: lpStartupInfo=0xdff798 | out: lpStartupInfo=0xdff798*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0041.428] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xdff5c0, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\tree.exe")) returned 0x26 [0041.428] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0xdff190, lpdwDisposition=0x0 | out: phkResult=0xdff190*=0xa8, lpdwDisposition=0x0) returned 0x0 [0041.429] RegSetValueExW (in: hKey=0xa8, lpValueName="MSFEEditor", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe\" e", cbData=0x56 | out: lpData="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe\" e") returned 0x0 [0041.429] RegCloseKey (hKey=0xa8) returned 0x0 [0041.429] GetLogicalDriveStringsA (in: nBufferLength=0x100, lpBuffer=0xdff4a4 | out: lpBuffer="C:\\") returned 0x4 [0041.430] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0041.430] GetLastError () returned 0x0 [0041.430] SetLastError (dwErrCode=0x0) [0041.430] GetLastError () returned 0x0 [0041.430] SetLastError (dwErrCode=0x0) [0041.430] GetLastError () returned 0x0 [0041.430] SetLastError (dwErrCode=0x0) [0041.430] lstrlenA (lpString="C:\\") returned 3 [0041.431] AreFileApisANSI () returned 1 [0041.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128bdb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0041.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128bdb0, cbMultiByte=-1, lpWideCharStr=0x1293b18, cchWideChar=25 | out: lpWideCharStr="C:\\\\CRYPTOID_BLOCKED.txt") returned 25 [0041.431] CreateFileW (lpFileName="C:\\\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfe7e0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0041.432] GetFileType (hFile=0xa8) returned 0x1 [0041.433] GetLastError () returned 0x0 [0041.433] SetLastError (dwErrCode=0x0) [0041.433] WriteFile (in: hFile=0xa8, lpBuffer=0xdfd48c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfd484, lpOverlapped=0x0 | out: lpBuffer=0xdfd48c*, lpNumberOfBytesWritten=0xdfd484*=0x423, lpOverlapped=0x0) returned 1 [0041.434] CloseHandle (hObject=0xa8) returned 1 [0041.435] AreFileApisANSI () returned 1 [0041.435] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128bcc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0041.435] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128bcc0, cbMultiByte=-1, lpWideCharStr=0x1290cf8, cchWideChar=22 | out: lpWideCharStr="C:\\\\CRYPTOID_HELP.txt") returned 22 [0041.435] CreateFileW (lpFileName="C:\\\\CRYPTOID_HELP.txt" (normalized: "c:\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfe7e0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0041.500] GetFileType (hFile=0xa8) returned 0x1 [0041.500] GetLastError () returned 0x0 [0041.500] SetLastError (dwErrCode=0x0) [0041.500] WriteFile (in: hFile=0xa8, lpBuffer=0xdfd48c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfd484, lpOverlapped=0x0 | out: lpBuffer=0xdfd48c*, lpNumberOfBytesWritten=0xdfd484*=0x423, lpOverlapped=0x0) returned 1 [0041.502] CloseHandle (hObject=0xa8) returned 1 [0041.503] AreFileApisANSI () returned 1 [0041.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128be00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0041.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128be00, cbMultiByte=-1, lpWideCharStr=0x1293b18, cchWideChar=25 | out: lpWideCharStr="C:\\\\CRYPTOID_MESSAGE.txt") returned 25 [0041.503] CreateFileW (lpFileName="C:\\\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfe7e0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0041.503] GetFileType (hFile=0xa8) returned 0x1 [0041.504] GetLastError () returned 0x0 [0041.504] SetLastError (dwErrCode=0x0) [0041.504] WriteFile (in: hFile=0xa8, lpBuffer=0xdfd48c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfd484, lpOverlapped=0x0 | out: lpBuffer=0xdfd48c*, lpNumberOfBytesWritten=0xdfd484*=0x423, lpOverlapped=0x0) returned 1 [0041.505] CloseHandle (hObject=0xa8) returned 1 [0041.505] FindFirstFileA (in: lpFileName="C:\\\\*", lpFindFileData=0xdfeb0c | out: lpFindFileData=0xdfeb0c) returned 0x1293b18 [0041.505] AreFileApisANSI () returned 1 [0041.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0041.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d30, cbMultiByte=-1, lpWideCharStr=0x1292280, cchWideChar=38 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\CRYPTOID_BLOCKED.txt") returned 38 [0041.506] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\$recycle.bin\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0041.506] GetFileType (hFile=0xac) returned 0x1 [0041.506] GetLastError () returned 0x0 [0041.506] SetLastError (dwErrCode=0x0) [0041.506] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0041.507] CloseHandle (hObject=0xac) returned 1 [0041.508] AreFileApisANSI () returned 1 [0041.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 35 [0041.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x1292280, cchWideChar=35 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\CRYPTOID_HELP.txt") returned 35 [0041.508] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\CRYPTOID_HELP.txt" (normalized: "c:\\$recycle.bin\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0041.542] GetFileType (hFile=0xac) returned 0x1 [0041.542] GetLastError () returned 0x0 [0041.542] SetLastError (dwErrCode=0x0) [0041.542] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0041.546] CloseHandle (hObject=0xac) returned 1 [0041.547] AreFileApisANSI () returned 1 [0041.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290b00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0041.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290b00, cbMultiByte=-1, lpWideCharStr=0x1292280, cchWideChar=38 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\CRYPTOID_MESSAGE.txt") returned 38 [0041.547] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\$recycle.bin\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0041.547] GetFileType (hFile=0xac) returned 0x1 [0041.548] GetLastError () returned 0x0 [0041.548] SetLastError (dwErrCode=0x0) [0041.548] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0041.549] CloseHandle (hObject=0xac) returned 1 [0041.549] FindFirstFileA (in: lpFileName="C:\\\\$Recycle.Bin\\*", lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 0x1292280 [0041.549] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.549] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.549] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.549] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.550] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.550] AreFileApisANSI () returned 1 [0041.550] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0041.550] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d68, cbMultiByte=-1, lpWideCharStr=0x1294978, cchWideChar=47 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-18\\CRYPTOID_BLOCKED.txt") returned 47 [0041.550] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\$recycle.bin\\s-1-5-18\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.566] GetFileType (hFile=0xb0) returned 0x1 [0041.567] GetLastError () returned 0x0 [0041.567] SetLastError (dwErrCode=0x0) [0041.567] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.568] CloseHandle (hObject=0xb0) returned 1 [0041.568] AreFileApisANSI () returned 1 [0041.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0041.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290cf8, cbMultiByte=-1, lpWideCharStr=0x12922c0, cchWideChar=44 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-18\\CRYPTOID_HELP.txt") returned 44 [0041.569] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\CRYPTOID_HELP.txt" (normalized: "c:\\$recycle.bin\\s-1-5-18\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.569] GetFileType (hFile=0xb0) returned 0x1 [0041.569] GetLastError () returned 0x0 [0041.569] SetLastError (dwErrCode=0x0) [0041.569] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.575] CloseHandle (hObject=0xb0) returned 1 [0041.575] AreFileApisANSI () returned 1 [0041.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0041.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x1294978, cchWideChar=47 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-18\\CRYPTOID_MESSAGE.txt") returned 47 [0041.576] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\$recycle.bin\\s-1-5-18\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.579] GetFileType (hFile=0xb0) returned 0x1 [0041.579] GetLastError () returned 0x0 [0041.579] SetLastError (dwErrCode=0x0) [0041.579] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.580] CloseHandle (hObject=0xb0) returned 1 [0041.581] FindFirstFileA (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x1294978 [0041.581] FindNextFileA (in: hFindFile=0x1294978, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.581] FindNextFileA (in: hFindFile=0x1294978, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.581] FindNextFileA (in: hFindFile=0x1294978, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.581] FindNextFileA (in: hFindFile=0x1294978, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.581] FindNextFileA (in: hFindFile=0x1294978, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.581] FindNextFileA (in: hFindFile=0x1294978, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0041.581] FindClose (in: hFindFile=0x1294978 | out: hFindFile=0x1294978) returned 1 [0041.581] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.582] AreFileApisANSI () returned 1 [0041.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12949c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0041.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12949c0, cbMultiByte=-1, lpWideCharStr=0x129a6e0, cchWideChar=84 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRYPTOID_BLOCKED.txt") returned 84 [0041.582] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\$recycle.bin\\s-1-5-21-1462094071-1423818996-289466292-1000\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.583] GetFileType (hFile=0xb0) returned 0x1 [0041.583] GetLastError () returned 0x0 [0041.583] SetLastError (dwErrCode=0x0) [0041.583] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.584] CloseHandle (hObject=0xb0) returned 1 [0041.585] AreFileApisANSI () returned 1 [0041.585] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12949c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0041.585] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12949c0, cbMultiByte=-1, lpWideCharStr=0x129a6e0, cchWideChar=81 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRYPTOID_HELP.txt") returned 81 [0041.585] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRYPTOID_HELP.txt" (normalized: "c:\\$recycle.bin\\s-1-5-21-1462094071-1423818996-289466292-1000\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.585] GetFileType (hFile=0xb0) returned 0x1 [0041.586] GetLastError () returned 0x0 [0041.586] SetLastError (dwErrCode=0x0) [0041.586] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.587] CloseHandle (hObject=0xb0) returned 1 [0041.588] AreFileApisANSI () returned 1 [0041.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12949c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0041.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12949c0, cbMultiByte=-1, lpWideCharStr=0x129a6e0, cchWideChar=84 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRYPTOID_MESSAGE.txt") returned 84 [0041.588] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\$recycle.bin\\s-1-5-21-1462094071-1423818996-289466292-1000\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.588] GetFileType (hFile=0xb0) returned 0x1 [0041.588] GetLastError () returned 0x0 [0041.588] SetLastError (dwErrCode=0x0) [0041.589] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.590] CloseHandle (hObject=0xb0) returned 1 [0041.590] FindFirstFileA (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x1294a08 [0041.590] FindNextFileA (in: hFindFile=0x1294a08, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.590] FindNextFileA (in: hFindFile=0x1294a08, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.590] FindNextFileA (in: hFindFile=0x1294a08, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.590] FindNextFileA (in: hFindFile=0x1294a08, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.590] FindNextFileA (in: hFindFile=0x1294a08, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.591] FindNextFileA (in: hFindFile=0x1294a08, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0041.591] FindClose (in: hFindFile=0x1294a08 | out: hFindFile=0x1294a08) returned 1 [0041.591] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 0 [0041.591] FindClose (in: hFindFile=0x1292280 | out: hFindFile=0x1292280) returned 1 [0041.591] FindNextFileA (in: hFindFile=0x1293b18, lpFindFileData=0xdfeb0c | out: lpFindFileData=0xdfeb0c) returned 1 [0041.591] AreFileApisANSI () returned 1 [0041.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128bcc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0041.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128bcc0, cbMultiByte=-1, lpWideCharStr=0x1292280, cchWideChar=30 | out: lpWideCharStr="C:\\\\Boot\\CRYPTOID_BLOCKED.txt") returned 30 [0041.591] CreateFileW (lpFileName="C:\\\\Boot\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0041.594] GetFileType (hFile=0xac) returned 0x1 [0041.594] GetLastError () returned 0x0 [0041.594] SetLastError (dwErrCode=0x0) [0041.594] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0041.595] CloseHandle (hObject=0xac) returned 1 [0041.596] AreFileApisANSI () returned 1 [0041.596] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128be00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 27 [0041.596] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128be00, cbMultiByte=-1, lpWideCharStr=0x1292280, cchWideChar=27 | out: lpWideCharStr="C:\\\\Boot\\CRYPTOID_HELP.txt") returned 27 [0041.596] CreateFileW (lpFileName="C:\\\\Boot\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0041.596] GetFileType (hFile=0xac) returned 0x1 [0041.596] GetLastError () returned 0x0 [0041.597] SetLastError (dwErrCode=0x0) [0041.597] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0041.598] CloseHandle (hObject=0xac) returned 1 [0041.598] AreFileApisANSI () returned 1 [0041.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128bcc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0041.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128bcc0, cbMultiByte=-1, lpWideCharStr=0x1292280, cchWideChar=30 | out: lpWideCharStr="C:\\\\Boot\\CRYPTOID_MESSAGE.txt") returned 30 [0041.598] CreateFileW (lpFileName="C:\\\\Boot\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0041.598] GetFileType (hFile=0xac) returned 0x1 [0041.598] GetLastError () returned 0x0 [0041.598] SetLastError (dwErrCode=0x0) [0041.598] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0041.599] CloseHandle (hObject=0xac) returned 1 [0041.600] FindFirstFileA (in: lpFileName="C:\\\\Boot\\*", lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 0x1292280 [0041.600] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.601] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.601] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.602] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.602] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.602] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.602] AreFileApisANSI () returned 1 [0041.602] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.602] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x12922c0, cchWideChar=36 | out: lpWideCharStr="C:\\\\Boot\\bg-BG\\CRYPTOID_BLOCKED.txt") returned 36 [0041.602] CreateFileW (lpFileName="C:\\\\Boot\\bg-BG\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\bg-bg\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.605] GetFileType (hFile=0xb0) returned 0x1 [0041.605] GetLastError () returned 0x0 [0041.605] SetLastError (dwErrCode=0x0) [0041.605] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.607] CloseHandle (hObject=0xb0) returned 1 [0041.607] AreFileApisANSI () returned 1 [0041.607] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0041.607] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x12922c0, cchWideChar=33 | out: lpWideCharStr="C:\\\\Boot\\bg-BG\\CRYPTOID_HELP.txt") returned 33 [0041.607] CreateFileW (lpFileName="C:\\\\Boot\\bg-BG\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\bg-bg\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.610] GetFileType (hFile=0xb0) returned 0x1 [0041.610] GetLastError () returned 0x0 [0041.610] SetLastError (dwErrCode=0x0) [0041.610] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.612] CloseHandle (hObject=0xb0) returned 1 [0041.612] AreFileApisANSI () returned 1 [0041.612] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.612] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d68, cbMultiByte=-1, lpWideCharStr=0x12922c0, cchWideChar=36 | out: lpWideCharStr="C:\\\\Boot\\bg-BG\\CRYPTOID_MESSAGE.txt") returned 36 [0041.612] CreateFileW (lpFileName="C:\\\\Boot\\bg-BG\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\bg-bg\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.613] GetFileType (hFile=0xb0) returned 0x1 [0041.613] GetLastError () returned 0x0 [0041.613] SetLastError (dwErrCode=0x0) [0041.613] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.614] CloseHandle (hObject=0xb0) returned 1 [0041.615] FindFirstFileA (in: lpFileName="C:\\\\Boot\\bg-BG\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0041.615] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.615] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.615] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.615] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.615] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.615] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0041.615] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0041.615] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.616] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.616] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.616] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.616] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.616] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.616] AreFileApisANSI () returned 1 [0041.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x12922c0, cchWideChar=36 | out: lpWideCharStr="C:\\\\Boot\\cs-CZ\\CRYPTOID_BLOCKED.txt") returned 36 [0041.616] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\cs-cz\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.622] GetFileType (hFile=0xb0) returned 0x1 [0041.622] GetLastError () returned 0x0 [0041.622] SetLastError (dwErrCode=0x0) [0041.622] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.624] CloseHandle (hObject=0xb0) returned 1 [0041.624] AreFileApisANSI () returned 1 [0041.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0041.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x12922c0, cchWideChar=33 | out: lpWideCharStr="C:\\\\Boot\\cs-CZ\\CRYPTOID_HELP.txt") returned 33 [0041.624] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\cs-cz\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.624] GetFileType (hFile=0xb0) returned 0x1 [0041.624] GetLastError () returned 0x0 [0041.624] SetLastError (dwErrCode=0x0) [0041.624] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.626] CloseHandle (hObject=0xb0) returned 1 [0041.626] AreFileApisANSI () returned 1 [0041.626] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.626] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x12922c0, cchWideChar=36 | out: lpWideCharStr="C:\\\\Boot\\cs-CZ\\CRYPTOID_MESSAGE.txt") returned 36 [0041.626] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\cs-cz\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.626] GetFileType (hFile=0xb0) returned 0x1 [0041.626] GetLastError () returned 0x0 [0041.626] SetLastError (dwErrCode=0x0) [0041.626] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.627] CloseHandle (hObject=0xb0) returned 1 [0041.628] FindFirstFileA (in: lpFileName="C:\\\\Boot\\cs-CZ\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0041.628] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.628] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.628] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.628] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.628] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.628] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.628] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0041.628] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0041.628] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.628] AreFileApisANSI () returned 1 [0041.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.628] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\da-dk\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.632] GetFileType (hFile=0xb0) returned 0x1 [0041.632] SetLastError (dwErrCode=0x0) [0041.632] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.633] CloseHandle (hObject=0xb0) returned 1 [0041.633] AreFileApisANSI () returned 1 [0041.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0041.633] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\da-dk\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.634] GetFileType (hFile=0xb0) returned 0x1 [0041.634] SetLastError (dwErrCode=0x0) [0041.634] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.635] CloseHandle (hObject=0xb0) returned 1 [0041.635] AreFileApisANSI () returned 1 [0041.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.635] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\da-dk\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.636] GetFileType (hFile=0xb0) returned 0x1 [0041.636] SetLastError (dwErrCode=0x0) [0041.636] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.637] CloseHandle (hObject=0xb0) returned 1 [0041.637] FindFirstFileA (in: lpFileName="C:\\\\Boot\\da-DK\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0041.637] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.637] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.637] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.637] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.637] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.638] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.638] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0041.638] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0041.638] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.638] AreFileApisANSI () returned 1 [0041.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.638] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\de-de\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.668] GetFileType (hFile=0xb0) returned 0x1 [0041.668] SetLastError (dwErrCode=0x0) [0041.668] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.669] CloseHandle (hObject=0xb0) returned 1 [0041.669] AreFileApisANSI () returned 1 [0041.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0041.669] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\de-de\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.672] GetFileType (hFile=0xb0) returned 0x1 [0041.672] SetLastError (dwErrCode=0x0) [0041.673] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.674] CloseHandle (hObject=0xb0) returned 1 [0041.674] AreFileApisANSI () returned 1 [0041.674] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.674] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\de-de\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.719] GetFileType (hFile=0xb0) returned 0x1 [0041.719] SetLastError (dwErrCode=0x0) [0041.719] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.720] CloseHandle (hObject=0xb0) returned 1 [0041.720] FindFirstFileA (in: lpFileName="C:\\\\Boot\\de-DE\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0041.720] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.720] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.720] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.720] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.720] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.720] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.720] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0041.720] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0041.720] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.721] AreFileApisANSI () returned 1 [0041.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.721] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\el-gr\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.736] GetFileType (hFile=0xb0) returned 0x1 [0041.736] SetLastError (dwErrCode=0x0) [0041.736] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.737] CloseHandle (hObject=0xb0) returned 1 [0041.738] AreFileApisANSI () returned 1 [0041.738] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0041.738] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\el-gr\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.738] GetFileType (hFile=0xb0) returned 0x1 [0041.738] SetLastError (dwErrCode=0x0) [0041.738] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.739] CloseHandle (hObject=0xb0) returned 1 [0041.740] AreFileApisANSI () returned 1 [0041.740] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.740] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\el-gr\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.745] GetFileType (hFile=0xb0) returned 0x1 [0041.745] SetLastError (dwErrCode=0x0) [0041.745] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.746] CloseHandle (hObject=0xb0) returned 1 [0041.746] FindFirstFileA (in: lpFileName="C:\\\\Boot\\el-GR\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0041.746] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.746] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.746] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.746] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.746] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.746] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.746] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0041.746] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0041.746] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.746] AreFileApisANSI () returned 1 [0041.746] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.747] CreateFileW (lpFileName="C:\\\\Boot\\en-GB\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\en-gb\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.750] GetFileType (hFile=0xb0) returned 0x1 [0041.750] SetLastError (dwErrCode=0x0) [0041.750] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.751] CloseHandle (hObject=0xb0) returned 1 [0041.752] AreFileApisANSI () returned 1 [0041.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0041.752] CreateFileW (lpFileName="C:\\\\Boot\\en-GB\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\en-gb\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.764] GetFileType (hFile=0xb0) returned 0x1 [0041.764] SetLastError (dwErrCode=0x0) [0041.764] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.765] CloseHandle (hObject=0xb0) returned 1 [0041.765] AreFileApisANSI () returned 1 [0041.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.765] CreateFileW (lpFileName="C:\\\\Boot\\en-GB\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\en-gb\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.766] GetFileType (hFile=0xb0) returned 0x1 [0041.766] SetLastError (dwErrCode=0x0) [0041.766] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.767] CloseHandle (hObject=0xb0) returned 1 [0041.767] FindFirstFileA (in: lpFileName="C:\\\\Boot\\en-GB\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0041.767] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.767] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.767] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.767] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.767] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.768] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0041.768] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0041.768] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.768] AreFileApisANSI () returned 1 [0041.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.768] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\en-us\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.776] GetFileType (hFile=0xb0) returned 0x1 [0041.776] SetLastError (dwErrCode=0x0) [0041.776] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.777] CloseHandle (hObject=0xb0) returned 1 [0041.777] AreFileApisANSI () returned 1 [0041.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0041.777] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\en-us\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.778] GetFileType (hFile=0xb0) returned 0x1 [0041.778] SetLastError (dwErrCode=0x0) [0041.778] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.779] CloseHandle (hObject=0xb0) returned 1 [0041.779] AreFileApisANSI () returned 1 [0041.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.779] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\en-us\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.783] GetFileType (hFile=0xb0) returned 0x1 [0041.783] SetLastError (dwErrCode=0x0) [0041.783] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.784] CloseHandle (hObject=0xb0) returned 1 [0041.784] FindFirstFileA (in: lpFileName="C:\\\\Boot\\en-US\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0041.784] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.784] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.784] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.784] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.784] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.785] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.785] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0041.785] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0041.785] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.785] AreFileApisANSI () returned 1 [0041.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.785] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\es-es\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.815] GetFileType (hFile=0xb0) returned 0x1 [0041.815] SetLastError (dwErrCode=0x0) [0041.815] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.816] CloseHandle (hObject=0xb0) returned 1 [0041.816] AreFileApisANSI () returned 1 [0041.817] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0041.817] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\es-es\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.819] GetFileType (hFile=0xb0) returned 0x1 [0041.819] SetLastError (dwErrCode=0x0) [0041.819] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.821] CloseHandle (hObject=0xb0) returned 1 [0041.822] AreFileApisANSI () returned 1 [0041.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.822] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\es-es\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.822] GetFileType (hFile=0xb0) returned 0x1 [0041.822] SetLastError (dwErrCode=0x0) [0041.822] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.823] CloseHandle (hObject=0xb0) returned 1 [0041.823] FindFirstFileA (in: lpFileName="C:\\\\Boot\\es-ES\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0041.824] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.824] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.824] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.824] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.824] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.824] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.824] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0041.824] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0041.824] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.824] AreFileApisANSI () returned 1 [0041.824] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.824] CreateFileW (lpFileName="C:\\\\Boot\\es-MX\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\es-mx\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.831] GetFileType (hFile=0xb0) returned 0x1 [0041.831] SetLastError (dwErrCode=0x0) [0041.831] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.832] CloseHandle (hObject=0xb0) returned 1 [0041.832] AreFileApisANSI () returned 1 [0041.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0041.832] CreateFileW (lpFileName="C:\\\\Boot\\es-MX\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\es-mx\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.869] GetFileType (hFile=0xb0) returned 0x1 [0041.869] SetLastError (dwErrCode=0x0) [0041.869] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.870] CloseHandle (hObject=0xb0) returned 1 [0041.871] AreFileApisANSI () returned 1 [0041.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290b00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.871] CreateFileW (lpFileName="C:\\\\Boot\\es-MX\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\es-mx\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.871] GetFileType (hFile=0xb0) returned 0x1 [0041.871] SetLastError (dwErrCode=0x0) [0041.871] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.872] CloseHandle (hObject=0xb0) returned 1 [0041.872] FindFirstFileA (in: lpFileName="C:\\\\Boot\\es-MX\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0041.872] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.872] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.872] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.872] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.872] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.873] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0041.873] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0041.876] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.876] AreFileApisANSI () returned 1 [0041.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.876] CreateFileW (lpFileName="C:\\\\Boot\\et-EE\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\et-ee\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.876] GetFileType (hFile=0xb0) returned 0x1 [0041.876] SetLastError (dwErrCode=0x0) [0041.876] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.878] CloseHandle (hObject=0xb0) returned 1 [0041.878] AreFileApisANSI () returned 1 [0041.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0041.878] CreateFileW (lpFileName="C:\\\\Boot\\et-EE\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\et-ee\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.888] GetFileType (hFile=0xb0) returned 0x1 [0041.888] SetLastError (dwErrCode=0x0) [0041.888] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.889] CloseHandle (hObject=0xb0) returned 1 [0041.889] AreFileApisANSI () returned 1 [0041.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.889] CreateFileW (lpFileName="C:\\\\Boot\\et-EE\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\et-ee\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.890] GetFileType (hFile=0xb0) returned 0x1 [0041.890] SetLastError (dwErrCode=0x0) [0041.890] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.891] CloseHandle (hObject=0xb0) returned 1 [0041.891] FindFirstFileA (in: lpFileName="C:\\\\Boot\\et-EE\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0041.891] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.891] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.891] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.892] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.892] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.892] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0041.892] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0041.892] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.892] AreFileApisANSI () returned 1 [0041.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.892] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\fi-fi\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.910] GetFileType (hFile=0xb0) returned 0x1 [0041.910] SetLastError (dwErrCode=0x0) [0041.910] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.911] CloseHandle (hObject=0xb0) returned 1 [0041.911] AreFileApisANSI () returned 1 [0041.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0041.911] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\fi-fi\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.912] GetFileType (hFile=0xb0) returned 0x1 [0041.912] SetLastError (dwErrCode=0x0) [0041.912] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.913] CloseHandle (hObject=0xb0) returned 1 [0041.913] AreFileApisANSI () returned 1 [0041.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.913] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\fi-fi\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.920] GetFileType (hFile=0xb0) returned 0x1 [0041.920] SetLastError (dwErrCode=0x0) [0041.920] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.922] CloseHandle (hObject=0xb0) returned 1 [0041.922] FindFirstFileA (in: lpFileName="C:\\\\Boot\\fi-FI\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0041.922] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.922] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.922] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.922] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.922] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.922] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.922] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0041.922] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0041.922] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.922] AreFileApisANSI () returned 1 [0041.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.922] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\fonts\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.967] GetFileType (hFile=0xb0) returned 0x1 [0041.967] SetLastError (dwErrCode=0x0) [0041.967] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.968] CloseHandle (hObject=0xb0) returned 1 [0041.969] AreFileApisANSI () returned 1 [0041.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0041.969] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\fonts\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.974] GetFileType (hFile=0xb0) returned 0x1 [0041.975] SetLastError (dwErrCode=0x0) [0041.975] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.976] CloseHandle (hObject=0xb0) returned 1 [0041.976] AreFileApisANSI () returned 1 [0041.976] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.976] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\fonts\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.976] GetFileType (hFile=0xb0) returned 0x1 [0041.976] SetLastError (dwErrCode=0x0) [0041.976] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.978] CloseHandle (hObject=0xb0) returned 1 [0041.978] FindFirstFileA (in: lpFileName="C:\\\\Boot\\Fonts\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0041.978] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.978] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.978] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.978] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.978] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.978] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.979] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.979] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.979] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.979] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.979] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.979] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.979] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.979] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.979] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.979] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.979] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.979] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.979] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.979] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0041.979] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0041.979] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0041.979] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0041.979] AreFileApisANSI () returned 1 [0041.979] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.979] CreateFileW (lpFileName="C:\\\\Boot\\fr-CA\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\fr-ca\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.980] GetFileType (hFile=0xb0) returned 0x1 [0041.980] SetLastError (dwErrCode=0x0) [0041.980] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.981] CloseHandle (hObject=0xb0) returned 1 [0041.981] AreFileApisANSI () returned 1 [0041.981] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0041.981] CreateFileW (lpFileName="C:\\\\Boot\\fr-CA\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\fr-ca\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0041.992] GetFileType (hFile=0xb0) returned 0x1 [0041.992] SetLastError (dwErrCode=0x0) [0041.992] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0041.993] CloseHandle (hObject=0xb0) returned 1 [0041.993] AreFileApisANSI () returned 1 [0041.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0041.993] CreateFileW (lpFileName="C:\\\\Boot\\fr-CA\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\fr-ca\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.005] GetFileType (hFile=0xb0) returned 0x1 [0042.005] SetLastError (dwErrCode=0x0) [0042.005] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.007] CloseHandle (hObject=0xb0) returned 1 [0042.007] FindFirstFileA (in: lpFileName="C:\\\\Boot\\fr-CA\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0042.007] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.007] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.007] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.007] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.007] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.007] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.007] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0042.007] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.007] AreFileApisANSI () returned 1 [0042.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.007] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\fr-fr\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.014] GetFileType (hFile=0xb0) returned 0x1 [0042.014] SetLastError (dwErrCode=0x0) [0042.014] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.015] CloseHandle (hObject=0xb0) returned 1 [0042.016] AreFileApisANSI () returned 1 [0042.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.016] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\fr-fr\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.016] GetFileType (hFile=0xb0) returned 0x1 [0042.016] SetLastError (dwErrCode=0x0) [0042.016] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.017] CloseHandle (hObject=0xb0) returned 1 [0042.017] AreFileApisANSI () returned 1 [0042.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.017] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\fr-fr\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.018] GetFileType (hFile=0xb0) returned 0x1 [0042.018] SetLastError (dwErrCode=0x0) [0042.018] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.019] CloseHandle (hObject=0xb0) returned 1 [0042.019] FindFirstFileA (in: lpFileName="C:\\\\Boot\\fr-FR\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0042.019] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.019] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.019] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.019] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.019] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.019] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.019] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.019] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0042.019] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.019] AreFileApisANSI () returned 1 [0042.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.020] CreateFileW (lpFileName="C:\\\\Boot\\hr-HR\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\hr-hr\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.030] GetFileType (hFile=0xb0) returned 0x1 [0042.031] SetLastError (dwErrCode=0x0) [0042.031] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.032] CloseHandle (hObject=0xb0) returned 1 [0042.032] AreFileApisANSI () returned 1 [0042.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.032] CreateFileW (lpFileName="C:\\\\Boot\\hr-HR\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\hr-hr\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.038] GetFileType (hFile=0xb0) returned 0x1 [0042.038] SetLastError (dwErrCode=0x0) [0042.038] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.039] CloseHandle (hObject=0xb0) returned 1 [0042.042] AreFileApisANSI () returned 1 [0042.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.042] CreateFileW (lpFileName="C:\\\\Boot\\hr-HR\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\hr-hr\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.042] GetFileType (hFile=0xb0) returned 0x1 [0042.042] SetLastError (dwErrCode=0x0) [0042.042] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.043] CloseHandle (hObject=0xb0) returned 1 [0042.044] FindFirstFileA (in: lpFileName="C:\\\\Boot\\hr-HR\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0042.044] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.044] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.044] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.044] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.044] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.044] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.044] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0042.044] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.044] AreFileApisANSI () returned 1 [0042.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.044] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\hu-hu\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.077] GetFileType (hFile=0xb0) returned 0x1 [0042.077] SetLastError (dwErrCode=0x0) [0042.077] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.080] CloseHandle (hObject=0xb0) returned 1 [0042.081] AreFileApisANSI () returned 1 [0042.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.081] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\hu-hu\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.081] GetFileType (hFile=0xb0) returned 0x1 [0042.081] SetLastError (dwErrCode=0x0) [0042.081] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.083] CloseHandle (hObject=0xb0) returned 1 [0042.083] AreFileApisANSI () returned 1 [0042.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.083] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\hu-hu\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.088] GetFileType (hFile=0xb0) returned 0x1 [0042.088] SetLastError (dwErrCode=0x0) [0042.088] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.089] CloseHandle (hObject=0xb0) returned 1 [0042.089] FindFirstFileA (in: lpFileName="C:\\\\Boot\\hu-HU\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0042.089] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.090] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.090] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.090] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.090] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.090] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.090] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.090] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0042.090] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.090] AreFileApisANSI () returned 1 [0042.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.091] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\it-it\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.111] GetFileType (hFile=0xb0) returned 0x1 [0042.111] SetLastError (dwErrCode=0x0) [0042.111] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.112] CloseHandle (hObject=0xb0) returned 1 [0042.112] AreFileApisANSI () returned 1 [0042.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.113] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\it-it\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.113] GetFileType (hFile=0xb0) returned 0x1 [0042.113] SetLastError (dwErrCode=0x0) [0042.113] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.114] CloseHandle (hObject=0xb0) returned 1 [0042.114] AreFileApisANSI () returned 1 [0042.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.115] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\it-it\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.115] GetFileType (hFile=0xb0) returned 0x1 [0042.115] SetLastError (dwErrCode=0x0) [0042.115] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.116] CloseHandle (hObject=0xb0) returned 1 [0042.117] FindFirstFileA (in: lpFileName="C:\\\\Boot\\it-IT\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0042.117] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.117] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.117] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.117] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.117] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.117] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.117] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.117] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0042.117] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.117] AreFileApisANSI () returned 1 [0042.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.117] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\ja-jp\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.162] GetFileType (hFile=0xb0) returned 0x1 [0042.162] SetLastError (dwErrCode=0x0) [0042.162] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.207] CloseHandle (hObject=0xb0) returned 1 [0042.207] AreFileApisANSI () returned 1 [0042.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.207] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\ja-jp\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.208] GetFileType (hFile=0xb0) returned 0x1 [0042.208] SetLastError (dwErrCode=0x0) [0042.208] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.209] CloseHandle (hObject=0xb0) returned 1 [0042.209] AreFileApisANSI () returned 1 [0042.209] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.209] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\ja-jp\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.212] GetFileType (hFile=0xb0) returned 0x1 [0042.212] SetLastError (dwErrCode=0x0) [0042.212] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.213] CloseHandle (hObject=0xb0) returned 1 [0042.213] FindFirstFileA (in: lpFileName="C:\\\\Boot\\ja-JP\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0042.213] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.213] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.214] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.214] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.214] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.214] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.214] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.214] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0042.214] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.214] AreFileApisANSI () returned 1 [0042.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.214] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\ko-kr\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.216] GetFileType (hFile=0xb0) returned 0x1 [0042.216] SetLastError (dwErrCode=0x0) [0042.217] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.217] CloseHandle (hObject=0xb0) returned 1 [0042.218] AreFileApisANSI () returned 1 [0042.218] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.218] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\ko-kr\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.219] GetFileType (hFile=0xb0) returned 0x1 [0042.220] SetLastError (dwErrCode=0x0) [0042.220] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.220] CloseHandle (hObject=0xb0) returned 1 [0042.221] AreFileApisANSI () returned 1 [0042.221] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.221] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\ko-kr\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.222] GetFileType (hFile=0xb0) returned 0x1 [0042.222] SetLastError (dwErrCode=0x0) [0042.222] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.223] CloseHandle (hObject=0xb0) returned 1 [0042.224] FindFirstFileA (in: lpFileName="C:\\\\Boot\\ko-KR\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0042.224] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.224] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.224] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.224] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.224] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.224] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.224] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.224] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0042.224] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.224] AreFileApisANSI () returned 1 [0042.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290b00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.224] CreateFileW (lpFileName="C:\\\\Boot\\lt-LT\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\lt-lt\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.229] GetFileType (hFile=0xb0) returned 0x1 [0042.229] SetLastError (dwErrCode=0x0) [0042.229] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.231] CloseHandle (hObject=0xb0) returned 1 [0042.231] AreFileApisANSI () returned 1 [0042.231] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.231] CreateFileW (lpFileName="C:\\\\Boot\\lt-LT\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\lt-lt\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.234] GetFileType (hFile=0xb0) returned 0x1 [0042.234] SetLastError (dwErrCode=0x0) [0042.234] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.235] CloseHandle (hObject=0xb0) returned 1 [0042.235] AreFileApisANSI () returned 1 [0042.235] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.235] CreateFileW (lpFileName="C:\\\\Boot\\lt-LT\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\lt-lt\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.236] GetFileType (hFile=0xb0) returned 0x1 [0042.236] SetLastError (dwErrCode=0x0) [0042.236] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.237] CloseHandle (hObject=0xb0) returned 1 [0042.237] FindFirstFileA (in: lpFileName="C:\\\\Boot\\lt-LT\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0042.237] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.237] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.237] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.237] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.238] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.238] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.238] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0042.238] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.238] AreFileApisANSI () returned 1 [0042.238] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.238] CreateFileW (lpFileName="C:\\\\Boot\\lv-LV\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\lv-lv\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.240] GetFileType (hFile=0xb0) returned 0x1 [0042.240] SetLastError (dwErrCode=0x0) [0042.240] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.242] CloseHandle (hObject=0xb0) returned 1 [0042.242] AreFileApisANSI () returned 1 [0042.242] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.242] CreateFileW (lpFileName="C:\\\\Boot\\lv-LV\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\lv-lv\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.245] GetFileType (hFile=0xb0) returned 0x1 [0042.245] SetLastError (dwErrCode=0x0) [0042.245] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.246] CloseHandle (hObject=0xb0) returned 1 [0042.246] AreFileApisANSI () returned 1 [0042.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.246] CreateFileW (lpFileName="C:\\\\Boot\\lv-LV\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\lv-lv\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.247] GetFileType (hFile=0xb0) returned 0x1 [0042.247] SetLastError (dwErrCode=0x0) [0042.247] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.248] CloseHandle (hObject=0xb0) returned 1 [0042.248] FindFirstFileA (in: lpFileName="C:\\\\Boot\\lv-LV\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0042.248] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.248] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.249] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.249] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.249] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.249] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.249] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0042.249] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.249] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.249] AreFileApisANSI () returned 1 [0042.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.249] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\nb-no\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.257] GetFileType (hFile=0xb0) returned 0x1 [0042.258] SetLastError (dwErrCode=0x0) [0042.258] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.259] CloseHandle (hObject=0xb0) returned 1 [0042.259] AreFileApisANSI () returned 1 [0042.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.259] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\nb-no\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.259] GetFileType (hFile=0xb0) returned 0x1 [0042.259] SetLastError (dwErrCode=0x0) [0042.259] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.260] CloseHandle (hObject=0xb0) returned 1 [0042.260] AreFileApisANSI () returned 1 [0042.260] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.260] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\nb-no\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.261] GetFileType (hFile=0xb0) returned 0x1 [0042.261] SetLastError (dwErrCode=0x0) [0042.261] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.262] CloseHandle (hObject=0xb0) returned 1 [0042.262] FindFirstFileA (in: lpFileName="C:\\\\Boot\\nb-NO\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0042.262] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.262] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.262] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.262] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.262] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.262] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.262] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.262] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0042.262] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.263] AreFileApisANSI () returned 1 [0042.263] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.263] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\nl-nl\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.269] GetFileType (hFile=0xb0) returned 0x1 [0042.269] SetLastError (dwErrCode=0x0) [0042.270] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.270] CloseHandle (hObject=0xb0) returned 1 [0042.271] AreFileApisANSI () returned 1 [0042.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.271] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\nl-nl\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.275] GetFileType (hFile=0xb0) returned 0x1 [0042.275] SetLastError (dwErrCode=0x0) [0042.275] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.276] CloseHandle (hObject=0xb0) returned 1 [0042.276] AreFileApisANSI () returned 1 [0042.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.276] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\nl-nl\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.277] GetFileType (hFile=0xb0) returned 0x1 [0042.277] SetLastError (dwErrCode=0x0) [0042.277] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.278] CloseHandle (hObject=0xb0) returned 1 [0042.278] FindFirstFileA (in: lpFileName="C:\\\\Boot\\nl-NL\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0042.278] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.278] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.278] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.278] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.278] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.279] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.279] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.279] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0042.279] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.279] AreFileApisANSI () returned 1 [0042.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.279] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\pl-pl\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.340] GetFileType (hFile=0xb0) returned 0x1 [0042.340] SetLastError (dwErrCode=0x0) [0042.340] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.341] CloseHandle (hObject=0xb0) returned 1 [0042.342] AreFileApisANSI () returned 1 [0042.342] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.342] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\pl-pl\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.342] GetFileType (hFile=0xb0) returned 0x1 [0042.342] SetLastError (dwErrCode=0x0) [0042.342] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.343] CloseHandle (hObject=0xb0) returned 1 [0042.343] AreFileApisANSI () returned 1 [0042.343] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.343] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\pl-pl\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.348] GetFileType (hFile=0xb0) returned 0x1 [0042.348] SetLastError (dwErrCode=0x0) [0042.348] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.349] CloseHandle (hObject=0xb0) returned 1 [0042.349] FindFirstFileA (in: lpFileName="C:\\\\Boot\\pl-PL\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0042.349] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.350] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.350] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.350] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.350] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.350] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.350] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.350] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0042.350] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.350] AreFileApisANSI () returned 1 [0042.350] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.350] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\pt-br\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.355] GetFileType (hFile=0xb0) returned 0x1 [0042.355] SetLastError (dwErrCode=0x0) [0042.355] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.356] CloseHandle (hObject=0xb0) returned 1 [0042.357] AreFileApisANSI () returned 1 [0042.357] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.357] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\pt-br\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.360] GetFileType (hFile=0xb0) returned 0x1 [0042.360] SetLastError (dwErrCode=0x0) [0042.360] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.361] CloseHandle (hObject=0xb0) returned 1 [0042.361] AreFileApisANSI () returned 1 [0042.361] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.361] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\pt-br\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.362] GetFileType (hFile=0xb0) returned 0x1 [0042.362] SetLastError (dwErrCode=0x0) [0042.362] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.363] CloseHandle (hObject=0xb0) returned 1 [0042.363] FindFirstFileA (in: lpFileName="C:\\\\Boot\\pt-BR\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0042.363] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.363] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.363] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.364] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.364] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.364] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.364] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.364] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0042.364] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.364] AreFileApisANSI () returned 1 [0042.364] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.364] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\pt-pt\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.370] GetFileType (hFile=0xb0) returned 0x1 [0042.371] SetLastError (dwErrCode=0x0) [0042.371] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.372] CloseHandle (hObject=0xb0) returned 1 [0042.372] AreFileApisANSI () returned 1 [0042.372] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.372] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\pt-pt\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.372] GetFileType (hFile=0xb0) returned 0x1 [0042.372] SetLastError (dwErrCode=0x0) [0042.372] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.373] CloseHandle (hObject=0xb0) returned 1 [0042.373] AreFileApisANSI () returned 1 [0042.373] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.373] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\pt-pt\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.375] GetFileType (hFile=0xb0) returned 0x1 [0042.375] SetLastError (dwErrCode=0x0) [0042.375] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.376] CloseHandle (hObject=0xb0) returned 1 [0042.376] FindFirstFileA (in: lpFileName="C:\\\\Boot\\pt-PT\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0042.376] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.376] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.376] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.376] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.376] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.376] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.376] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.377] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0042.377] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.377] AreFileApisANSI () returned 1 [0042.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 39 [0042.377] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\qps-ploc\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.383] GetFileType (hFile=0xb0) returned 0x1 [0042.383] SetLastError (dwErrCode=0x0) [0042.383] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.384] CloseHandle (hObject=0xb0) returned 1 [0042.384] AreFileApisANSI () returned 1 [0042.384] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.384] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\qps-ploc\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.384] GetFileType (hFile=0xb0) returned 0x1 [0042.384] SetLastError (dwErrCode=0x0) [0042.385] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.385] CloseHandle (hObject=0xb0) returned 1 [0042.386] AreFileApisANSI () returned 1 [0042.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 39 [0042.386] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\qps-ploc\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.386] GetFileType (hFile=0xb0) returned 0x1 [0042.386] SetLastError (dwErrCode=0x0) [0042.386] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.387] CloseHandle (hObject=0xb0) returned 1 [0042.387] FindFirstFileA (in: lpFileName="C:\\\\Boot\\qps-ploc\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0042.387] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.387] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.387] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.387] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.387] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.387] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.387] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.387] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0042.387] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.387] AreFileApisANSI () returned 1 [0042.388] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 40 [0042.388] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\resources\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.396] GetFileType (hFile=0xb0) returned 0x1 [0042.396] SetLastError (dwErrCode=0x0) [0042.396] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.398] CloseHandle (hObject=0xb0) returned 1 [0042.398] AreFileApisANSI () returned 1 [0042.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 37 [0042.398] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\resources\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.401] GetFileType (hFile=0xb0) returned 0x1 [0042.401] SetLastError (dwErrCode=0x0) [0042.401] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.402] CloseHandle (hObject=0xb0) returned 1 [0042.402] AreFileApisANSI () returned 1 [0042.402] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 40 [0042.402] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\resources\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.404] GetFileType (hFile=0xb0) returned 0x1 [0042.404] SetLastError (dwErrCode=0x0) [0042.404] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.405] CloseHandle (hObject=0xb0) returned 1 [0042.405] FindFirstFileA (in: lpFileName="C:\\\\Boot\\Resources\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x12922c0 [0042.405] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.405] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.405] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.405] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.405] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.405] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.405] AreFileApisANSI () returned 1 [0042.405] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0042.405] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\en-US\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\resources\\en-us\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfcbc0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0042.406] GetFileType (hFile=0xb4) returned 0x1 [0042.406] SetLastError (dwErrCode=0x0) [0042.406] WriteFile (in: hFile=0xb4, lpBuffer=0xdfb86c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfb864, lpOverlapped=0x0 | out: lpBuffer=0xdfb86c*, lpNumberOfBytesWritten=0xdfb864*=0x423, lpOverlapped=0x0) returned 1 [0042.407] CloseHandle (hObject=0xb4) returned 1 [0042.407] AreFileApisANSI () returned 1 [0042.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0042.407] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\en-US\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\resources\\en-us\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfcbc0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0042.415] GetFileType (hFile=0xb4) returned 0x1 [0042.415] SetLastError (dwErrCode=0x0) [0042.415] WriteFile (in: hFile=0xb4, lpBuffer=0xdfb86c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfb864, lpOverlapped=0x0 | out: lpBuffer=0xdfb86c*, lpNumberOfBytesWritten=0xdfb864*=0x423, lpOverlapped=0x0) returned 1 [0042.416] CloseHandle (hObject=0xb4) returned 1 [0042.416] AreFileApisANSI () returned 1 [0042.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0042.416] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\en-US\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\resources\\en-us\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfcbc0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0042.416] GetFileType (hFile=0xb4) returned 0x1 [0042.416] SetLastError (dwErrCode=0x0) [0042.416] WriteFile (in: hFile=0xb4, lpBuffer=0xdfb86c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfb864, lpOverlapped=0x0 | out: lpBuffer=0xdfb86c*, lpNumberOfBytesWritten=0xdfb864*=0x423, lpOverlapped=0x0) returned 1 [0042.417] CloseHandle (hObject=0xb4) returned 1 [0042.418] FindFirstFileA (in: lpFileName="C:\\\\Boot\\Resources\\en-US\\*", lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 0x129dcc0 [0042.418] FindNextFileA (in: hFindFile=0x129dcc0, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 1 [0042.418] FindNextFileA (in: hFindFile=0x129dcc0, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 1 [0042.418] FindNextFileA (in: hFindFile=0x129dcc0, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 1 [0042.418] FindNextFileA (in: hFindFile=0x129dcc0, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 1 [0042.418] FindNextFileA (in: hFindFile=0x129dcc0, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 1 [0042.418] FindNextFileA (in: hFindFile=0x129dcc0, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 0 [0042.418] FindClose (in: hFindFile=0x129dcc0 | out: hFindFile=0x129dcc0) returned 1 [0042.418] FindNextFileA (in: hFindFile=0x12922c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.418] FindClose (in: hFindFile=0x12922c0 | out: hFindFile=0x12922c0) returned 1 [0042.418] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.418] AreFileApisANSI () returned 1 [0042.418] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.418] CreateFileW (lpFileName="C:\\\\Boot\\ro-RO\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\ro-ro\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.451] GetFileType (hFile=0xb0) returned 0x1 [0042.451] SetLastError (dwErrCode=0x0) [0042.451] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.452] CloseHandle (hObject=0xb0) returned 1 [0042.453] AreFileApisANSI () returned 1 [0042.453] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.453] CreateFileW (lpFileName="C:\\\\Boot\\ro-RO\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\ro-ro\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.459] GetFileType (hFile=0xb0) returned 0x1 [0042.459] SetLastError (dwErrCode=0x0) [0042.459] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.460] CloseHandle (hObject=0xb0) returned 1 [0042.460] AreFileApisANSI () returned 1 [0042.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.460] CreateFileW (lpFileName="C:\\\\Boot\\ro-RO\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\ro-ro\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.461] GetFileType (hFile=0xb0) returned 0x1 [0042.461] SetLastError (dwErrCode=0x0) [0042.461] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.462] CloseHandle (hObject=0xb0) returned 1 [0042.462] FindFirstFileA (in: lpFileName="C:\\\\Boot\\ro-RO\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x129dd00 [0042.462] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.462] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.462] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.462] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.462] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.462] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.462] FindClose (in: hFindFile=0x129dd00 | out: hFindFile=0x129dd00) returned 1 [0042.462] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.462] AreFileApisANSI () returned 1 [0042.462] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.462] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\ru-ru\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.467] GetFileType (hFile=0xb0) returned 0x1 [0042.467] SetLastError (dwErrCode=0x0) [0042.467] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.468] CloseHandle (hObject=0xb0) returned 1 [0042.468] AreFileApisANSI () returned 1 [0042.468] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.468] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\ru-ru\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.469] GetFileType (hFile=0xb0) returned 0x1 [0042.469] SetLastError (dwErrCode=0x0) [0042.469] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.470] CloseHandle (hObject=0xb0) returned 1 [0042.471] AreFileApisANSI () returned 1 [0042.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.471] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\ru-ru\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.482] GetFileType (hFile=0xb0) returned 0x1 [0042.483] SetLastError (dwErrCode=0x0) [0042.483] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.484] CloseHandle (hObject=0xb0) returned 1 [0042.484] FindFirstFileA (in: lpFileName="C:\\\\Boot\\ru-RU\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x129db40 [0042.484] FindNextFileA (in: hFindFile=0x129db40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.484] FindNextFileA (in: hFindFile=0x129db40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.484] FindNextFileA (in: hFindFile=0x129db40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.484] FindNextFileA (in: hFindFile=0x129db40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.484] FindNextFileA (in: hFindFile=0x129db40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.484] FindNextFileA (in: hFindFile=0x129db40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.484] FindNextFileA (in: hFindFile=0x129db40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.484] FindClose (in: hFindFile=0x129db40 | out: hFindFile=0x129db40) returned 1 [0042.485] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.485] AreFileApisANSI () returned 1 [0042.485] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.485] CreateFileW (lpFileName="C:\\\\Boot\\sk-SK\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\sk-sk\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.488] GetFileType (hFile=0xb0) returned 0x1 [0042.489] SetLastError (dwErrCode=0x0) [0042.489] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.490] CloseHandle (hObject=0xb0) returned 1 [0042.490] AreFileApisANSI () returned 1 [0042.490] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.490] CreateFileW (lpFileName="C:\\\\Boot\\sk-SK\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\sk-sk\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.495] GetFileType (hFile=0xb0) returned 0x1 [0042.495] SetLastError (dwErrCode=0x0) [0042.495] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.501] CloseHandle (hObject=0xb0) returned 1 [0042.501] AreFileApisANSI () returned 1 [0042.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.501] CreateFileW (lpFileName="C:\\\\Boot\\sk-SK\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\sk-sk\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.502] GetFileType (hFile=0xb0) returned 0x1 [0042.502] SetLastError (dwErrCode=0x0) [0042.502] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.503] CloseHandle (hObject=0xb0) returned 1 [0042.503] FindFirstFileA (in: lpFileName="C:\\\\Boot\\sk-SK\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x129dc40 [0042.503] FindNextFileA (in: hFindFile=0x129dc40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.504] FindNextFileA (in: hFindFile=0x129dc40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.504] FindNextFileA (in: hFindFile=0x129dc40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.504] FindNextFileA (in: hFindFile=0x129dc40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.504] FindNextFileA (in: hFindFile=0x129dc40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.504] FindNextFileA (in: hFindFile=0x129dc40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.504] FindClose (in: hFindFile=0x129dc40 | out: hFindFile=0x129dc40) returned 1 [0042.504] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.504] AreFileApisANSI () returned 1 [0042.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.504] CreateFileW (lpFileName="C:\\\\Boot\\sl-SI\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\sl-si\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.527] GetFileType (hFile=0xb0) returned 0x1 [0042.527] SetLastError (dwErrCode=0x0) [0042.527] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.528] CloseHandle (hObject=0xb0) returned 1 [0042.528] AreFileApisANSI () returned 1 [0042.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.528] CreateFileW (lpFileName="C:\\\\Boot\\sl-SI\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\sl-si\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.547] GetFileType (hFile=0xb0) returned 0x1 [0042.547] SetLastError (dwErrCode=0x0) [0042.547] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.554] CloseHandle (hObject=0xb0) returned 1 [0042.554] AreFileApisANSI () returned 1 [0042.554] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.554] CreateFileW (lpFileName="C:\\\\Boot\\sl-SI\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\sl-si\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.554] GetFileType (hFile=0xb0) returned 0x1 [0042.554] SetLastError (dwErrCode=0x0) [0042.555] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.555] CloseHandle (hObject=0xb0) returned 1 [0042.556] FindFirstFileA (in: lpFileName="C:\\\\Boot\\sl-SI\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x129d800 [0042.556] FindNextFileA (in: hFindFile=0x129d800, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.556] FindNextFileA (in: hFindFile=0x129d800, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.556] FindNextFileA (in: hFindFile=0x129d800, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.556] FindNextFileA (in: hFindFile=0x129d800, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.556] FindNextFileA (in: hFindFile=0x129d800, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.556] FindNextFileA (in: hFindFile=0x129d800, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.556] FindClose (in: hFindFile=0x129d800 | out: hFindFile=0x129d800) returned 1 [0042.556] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.556] AreFileApisANSI () returned 1 [0042.556] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0042.556] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\sr-latn-cs\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.565] GetFileType (hFile=0xb0) returned 0x1 [0042.565] SetLastError (dwErrCode=0x0) [0042.565] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.566] CloseHandle (hObject=0xb0) returned 1 [0042.566] AreFileApisANSI () returned 1 [0042.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0042.566] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\sr-latn-cs\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.566] GetFileType (hFile=0xb0) returned 0x1 [0042.566] SetLastError (dwErrCode=0x0) [0042.566] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.567] CloseHandle (hObject=0xb0) returned 1 [0042.567] AreFileApisANSI () returned 1 [0042.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0042.567] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\sr-latn-cs\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.567] GetFileType (hFile=0xb0) returned 0x1 [0042.567] SetLastError (dwErrCode=0x0) [0042.568] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.568] CloseHandle (hObject=0xb0) returned 1 [0042.568] FindFirstFileA (in: lpFileName="C:\\\\Boot\\sr-Latn-CS\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x129d9c0 [0042.569] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.569] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.569] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.569] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.569] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.569] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.569] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.569] FindClose (in: hFindFile=0x129d9c0 | out: hFindFile=0x129d9c0) returned 1 [0042.569] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.569] AreFileApisANSI () returned 1 [0042.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0042.569] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-RS\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\sr-latn-rs\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.573] GetFileType (hFile=0xb0) returned 0x1 [0042.573] SetLastError (dwErrCode=0x0) [0042.573] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.574] CloseHandle (hObject=0xb0) returned 1 [0042.574] AreFileApisANSI () returned 1 [0042.574] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0042.575] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-RS\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\sr-latn-rs\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.578] GetFileType (hFile=0xb0) returned 0x1 [0042.578] SetLastError (dwErrCode=0x0) [0042.578] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.579] CloseHandle (hObject=0xb0) returned 1 [0042.579] AreFileApisANSI () returned 1 [0042.579] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0042.579] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-RS\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\sr-latn-rs\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.604] GetFileType (hFile=0xb0) returned 0x1 [0042.604] SetLastError (dwErrCode=0x0) [0042.604] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.605] CloseHandle (hObject=0xb0) returned 1 [0042.606] FindFirstFileA (in: lpFileName="C:\\\\Boot\\sr-Latn-RS\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x129dc00 [0042.606] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.606] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.606] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.606] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.606] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.606] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.606] FindClose (in: hFindFile=0x129dc00 | out: hFindFile=0x129dc00) returned 1 [0042.606] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.606] AreFileApisANSI () returned 1 [0042.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.606] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\sv-se\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.609] GetFileType (hFile=0xb0) returned 0x1 [0042.609] SetLastError (dwErrCode=0x0) [0042.609] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.610] CloseHandle (hObject=0xb0) returned 1 [0042.610] AreFileApisANSI () returned 1 [0042.610] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.610] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\sv-se\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.615] GetFileType (hFile=0xb0) returned 0x1 [0042.615] SetLastError (dwErrCode=0x0) [0042.616] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.618] CloseHandle (hObject=0xb0) returned 1 [0042.618] AreFileApisANSI () returned 1 [0042.618] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.618] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\sv-se\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.618] GetFileType (hFile=0xb0) returned 0x1 [0042.618] SetLastError (dwErrCode=0x0) [0042.618] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.619] CloseHandle (hObject=0xb0) returned 1 [0042.619] FindFirstFileA (in: lpFileName="C:\\\\Boot\\sv-SE\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x129df80 [0042.619] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.619] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.619] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.619] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.619] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.620] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.620] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.620] FindClose (in: hFindFile=0x129df80 | out: hFindFile=0x129df80) returned 1 [0042.620] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.620] AreFileApisANSI () returned 1 [0042.620] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.620] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\tr-tr\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.627] GetFileType (hFile=0xb0) returned 0x1 [0042.627] SetLastError (dwErrCode=0x0) [0042.627] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.628] CloseHandle (hObject=0xb0) returned 1 [0042.628] AreFileApisANSI () returned 1 [0042.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.628] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\tr-tr\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.628] GetFileType (hFile=0xb0) returned 0x1 [0042.628] SetLastError (dwErrCode=0x0) [0042.628] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.629] CloseHandle (hObject=0xb0) returned 1 [0042.629] AreFileApisANSI () returned 1 [0042.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.629] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\tr-tr\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.636] GetFileType (hFile=0xb0) returned 0x1 [0042.636] SetLastError (dwErrCode=0x0) [0042.636] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.637] CloseHandle (hObject=0xb0) returned 1 [0042.638] FindFirstFileA (in: lpFileName="C:\\\\Boot\\tr-TR\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x129df80 [0042.638] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.638] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.638] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.638] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.638] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.638] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.638] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.638] FindClose (in: hFindFile=0x129df80 | out: hFindFile=0x129df80) returned 1 [0042.638] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.638] AreFileApisANSI () returned 1 [0042.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.638] CreateFileW (lpFileName="C:\\\\Boot\\uk-UA\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\uk-ua\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.644] GetFileType (hFile=0xb0) returned 0x1 [0042.644] SetLastError (dwErrCode=0x0) [0042.644] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.645] CloseHandle (hObject=0xb0) returned 1 [0042.645] AreFileApisANSI () returned 1 [0042.645] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.646] CreateFileW (lpFileName="C:\\\\Boot\\uk-UA\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\uk-ua\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.649] GetFileType (hFile=0xb0) returned 0x1 [0042.649] SetLastError (dwErrCode=0x0) [0042.649] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.650] CloseHandle (hObject=0xb0) returned 1 [0042.650] AreFileApisANSI () returned 1 [0042.650] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.650] CreateFileW (lpFileName="C:\\\\Boot\\uk-UA\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\uk-ua\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.652] GetFileType (hFile=0xb0) returned 0x1 [0042.652] SetLastError (dwErrCode=0x0) [0042.652] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.653] CloseHandle (hObject=0xb0) returned 1 [0042.653] FindFirstFileA (in: lpFileName="C:\\\\Boot\\uk-UA\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x129d840 [0042.653] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.653] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.653] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.653] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.653] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.653] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.653] FindClose (in: hFindFile=0x129d840 | out: hFindFile=0x129d840) returned 1 [0042.654] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.654] AreFileApisANSI () returned 1 [0042.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.654] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\zh-cn\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.656] GetFileType (hFile=0xb0) returned 0x1 [0042.656] SetLastError (dwErrCode=0x0) [0042.656] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.657] CloseHandle (hObject=0xb0) returned 1 [0042.657] AreFileApisANSI () returned 1 [0042.657] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.657] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\zh-cn\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.658] GetFileType (hFile=0xb0) returned 0x1 [0042.658] SetLastError (dwErrCode=0x0) [0042.658] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.659] CloseHandle (hObject=0xb0) returned 1 [0042.659] AreFileApisANSI () returned 1 [0042.659] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.659] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\zh-cn\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.660] GetFileType (hFile=0xb0) returned 0x1 [0042.660] SetLastError (dwErrCode=0x0) [0042.660] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.661] CloseHandle (hObject=0xb0) returned 1 [0042.661] FindFirstFileA (in: lpFileName="C:\\\\Boot\\zh-CN\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x129d840 [0042.662] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.662] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.662] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.662] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.662] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.662] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.662] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.662] FindClose (in: hFindFile=0x129d840 | out: hFindFile=0x129d840) returned 1 [0042.662] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.662] AreFileApisANSI () returned 1 [0042.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.662] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\zh-hk\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.668] GetFileType (hFile=0xb0) returned 0x1 [0042.668] SetLastError (dwErrCode=0x0) [0042.668] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.669] CloseHandle (hObject=0xb0) returned 1 [0042.669] AreFileApisANSI () returned 1 [0042.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.669] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\zh-hk\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.669] GetFileType (hFile=0xb0) returned 0x1 [0042.670] SetLastError (dwErrCode=0x0) [0042.670] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.670] CloseHandle (hObject=0xb0) returned 1 [0042.671] AreFileApisANSI () returned 1 [0042.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.671] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\zh-hk\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.671] GetFileType (hFile=0xb0) returned 0x1 [0042.671] SetLastError (dwErrCode=0x0) [0042.671] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.672] CloseHandle (hObject=0xb0) returned 1 [0042.672] FindFirstFileA (in: lpFileName="C:\\\\Boot\\zh-HK\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x129da40 [0042.672] FindNextFileA (in: hFindFile=0x129da40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.672] FindNextFileA (in: hFindFile=0x129da40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.672] FindNextFileA (in: hFindFile=0x129da40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.672] FindNextFileA (in: hFindFile=0x129da40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.672] FindNextFileA (in: hFindFile=0x129da40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.672] FindNextFileA (in: hFindFile=0x129da40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.672] FindNextFileA (in: hFindFile=0x129da40, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.672] FindClose (in: hFindFile=0x129da40 | out: hFindFile=0x129da40) returned 1 [0042.672] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.672] AreFileApisANSI () returned 1 [0042.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.672] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\zh-tw\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.683] GetFileType (hFile=0xb0) returned 0x1 [0042.683] SetLastError (dwErrCode=0x0) [0042.683] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.685] CloseHandle (hObject=0xb0) returned 1 [0042.685] AreFileApisANSI () returned 1 [0042.685] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.685] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\zh-tw\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.685] GetFileType (hFile=0xb0) returned 0x1 [0042.685] SetLastError (dwErrCode=0x0) [0042.685] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.687] CloseHandle (hObject=0xb0) returned 1 [0042.687] AreFileApisANSI () returned 1 [0042.687] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.687] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\zh-tw\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.691] GetFileType (hFile=0xb0) returned 0x1 [0042.691] SetLastError (dwErrCode=0x0) [0042.691] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.692] CloseHandle (hObject=0xb0) returned 1 [0042.692] FindFirstFileA (in: lpFileName="C:\\\\Boot\\zh-TW\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x129ddc0 [0042.692] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.692] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.692] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.692] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.692] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.692] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.692] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0 [0042.692] FindClose (in: hFindFile=0x129ddc0 | out: hFindFile=0x129ddc0) returned 1 [0042.693] FindNextFileA (in: hFindFile=0x1292280, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 0 [0042.693] FindClose (in: hFindFile=0x1292280 | out: hFindFile=0x1292280) returned 1 [0042.693] FindNextFileA (in: hFindFile=0x1293b18, lpFindFileData=0xdfeb0c | out: lpFindFileData=0xdfeb0c) returned 1 [0042.693] FindNextFileA (in: hFindFile=0x1293b18, lpFindFileData=0xdfeb0c | out: lpFindFileData=0xdfeb0c) returned 1 [0042.693] FindNextFileA (in: hFindFile=0x1293b18, lpFindFileData=0xdfeb0c | out: lpFindFileData=0xdfeb0c) returned 1 [0042.693] FindNextFileA (in: hFindFile=0x1293b18, lpFindFileData=0xdfeb0c | out: lpFindFileData=0xdfeb0c) returned 1 [0042.693] AreFileApisANSI () returned 1 [0042.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.693] CreateFileW (lpFileName="C:\\\\Config.Msi\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\config.msi\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0042.693] GetFileType (hFile=0xac) returned 0x1 [0042.693] SetLastError (dwErrCode=0x0) [0042.693] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0042.694] CloseHandle (hObject=0xac) returned 1 [0042.695] AreFileApisANSI () returned 1 [0042.695] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0042.695] CreateFileW (lpFileName="C:\\\\Config.Msi\\CRYPTOID_HELP.txt" (normalized: "c:\\config.msi\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0042.695] GetFileType (hFile=0xac) returned 0x1 [0042.695] SetLastError (dwErrCode=0x0) [0042.695] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0042.696] CloseHandle (hObject=0xac) returned 1 [0042.696] AreFileApisANSI () returned 1 [0042.696] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.696] CreateFileW (lpFileName="C:\\\\Config.Msi\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\config.msi\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0042.699] GetFileType (hFile=0xac) returned 0x1 [0042.699] SetLastError (dwErrCode=0x0) [0042.699] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0042.700] CloseHandle (hObject=0xac) returned 1 [0042.700] FindFirstFileA (in: lpFileName="C:\\\\Config.Msi\\*", lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 0x129d840 [0042.700] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.700] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.700] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.700] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.701] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 0 [0042.701] FindClose (in: hFindFile=0x129d840 | out: hFindFile=0x129d840) returned 1 [0042.701] FindNextFileA (in: hFindFile=0x1293b18, lpFindFileData=0xdfeb0c | out: lpFindFileData=0xdfeb0c) returned 1 [0042.701] FindNextFileA (in: hFindFile=0x1293b18, lpFindFileData=0xdfeb0c | out: lpFindFileData=0xdfeb0c) returned 1 [0042.701] FindNextFileA (in: hFindFile=0x1293b18, lpFindFileData=0xdfeb0c | out: lpFindFileData=0xdfeb0c) returned 1 [0042.701] FindNextFileA (in: hFindFile=0x1293b18, lpFindFileData=0xdfeb0c | out: lpFindFileData=0xdfeb0c) returned 1 [0042.701] AreFileApisANSI () returned 1 [0042.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0042.701] CreateFileW (lpFileName="C:\\\\Documents and Settings\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\documents and settings\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0042.728] GetFileType (hFile=0xac) returned 0x1 [0042.728] SetLastError (dwErrCode=0x0) [0042.728] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0042.729] CloseHandle (hObject=0xac) returned 1 [0042.729] AreFileApisANSI () returned 1 [0042.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290d30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0042.729] CreateFileW (lpFileName="C:\\\\Documents and Settings\\CRYPTOID_HELP.txt" (normalized: "c:\\documents and settings\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0042.729] GetFileType (hFile=0xac) returned 0x1 [0042.729] SetLastError (dwErrCode=0x0) [0042.729] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0042.730] CloseHandle (hObject=0xac) returned 1 [0042.730] AreFileApisANSI () returned 1 [0042.730] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0042.730] CreateFileW (lpFileName="C:\\\\Documents and Settings\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\documents and settings\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0042.731] GetFileType (hFile=0xac) returned 0x1 [0042.731] SetLastError (dwErrCode=0x0) [0042.731] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0042.732] CloseHandle (hObject=0xac) returned 1 [0042.732] FindFirstFileA (in: lpFileName="C:\\\\Documents and Settings\\*", lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 0xffffffff [0042.732] FindNextFileA (in: hFindFile=0x1293b18, lpFindFileData=0xdfeb0c | out: lpFindFileData=0xdfeb0c) returned 1 [0042.732] FindNextFileA (in: hFindFile=0x1293b18, lpFindFileData=0xdfeb0c | out: lpFindFileData=0xdfeb0c) returned 1 [0042.732] FindNextFileA (in: hFindFile=0x1293b18, lpFindFileData=0xdfeb0c | out: lpFindFileData=0xdfeb0c) returned 1 [0042.732] AreFileApisANSI () returned 1 [0042.732] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 34 [0042.732] CreateFileW (lpFileName="C:\\\\PerfLogs\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\perflogs\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0042.734] GetFileType (hFile=0xac) returned 0x1 [0042.734] SetLastError (dwErrCode=0x0) [0042.734] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0042.735] CloseHandle (hObject=0xac) returned 1 [0042.735] AreFileApisANSI () returned 1 [0042.735] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128bdb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 31 [0042.735] CreateFileW (lpFileName="C:\\\\PerfLogs\\CRYPTOID_HELP.txt" (normalized: "c:\\perflogs\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0042.735] GetFileType (hFile=0xac) returned 0x1 [0042.735] SetLastError (dwErrCode=0x0) [0042.735] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0042.736] CloseHandle (hObject=0xac) returned 1 [0042.737] AreFileApisANSI () returned 1 [0042.737] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 34 [0042.737] CreateFileW (lpFileName="C:\\\\PerfLogs\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\perflogs\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0042.739] GetFileType (hFile=0xac) returned 0x1 [0042.739] SetLastError (dwErrCode=0x0) [0042.739] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0042.740] CloseHandle (hObject=0xac) returned 1 [0042.740] FindFirstFileA (in: lpFileName="C:\\\\PerfLogs\\*", lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 0x129ddc0 [0042.740] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.740] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.740] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.740] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.740] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 0 [0042.740] FindClose (in: hFindFile=0x129ddc0 | out: hFindFile=0x129ddc0) returned 1 [0042.740] FindNextFileA (in: hFindFile=0x1293b18, lpFindFileData=0xdfeb0c | out: lpFindFileData=0xdfeb0c) returned 1 [0042.740] AreFileApisANSI () returned 1 [0042.740] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290a20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 39 [0042.740] CreateFileW (lpFileName="C:\\\\Program Files\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0042.741] GetFileType (hFile=0xac) returned 0x1 [0042.741] SetLastError (dwErrCode=0x0) [0042.741] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0042.742] CloseHandle (hObject=0xac) returned 1 [0042.742] AreFileApisANSI () returned 1 [0042.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0042.742] CreateFileW (lpFileName="C:\\\\Program Files\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0042.742] GetFileType (hFile=0xac) returned 0x1 [0042.742] SetLastError (dwErrCode=0x0) [0042.742] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0042.746] CloseHandle (hObject=0xac) returned 1 [0042.746] AreFileApisANSI () returned 1 [0042.746] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 39 [0042.746] CreateFileW (lpFileName="C:\\\\Program Files\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfde80, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0042.746] GetFileType (hFile=0xac) returned 0x1 [0042.746] SetLastError (dwErrCode=0x0) [0042.746] WriteFile (in: hFile=0xac, lpBuffer=0xdfcb2c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfcb24, lpOverlapped=0x0 | out: lpBuffer=0xdfcb2c*, lpNumberOfBytesWritten=0xdfcb24*=0x423, lpOverlapped=0x0) returned 1 [0042.747] CloseHandle (hObject=0xac) returned 1 [0042.747] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\*", lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 0x129df40 [0042.747] FindNextFileA (in: hFindFile=0x129df40, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.747] FindNextFileA (in: hFindFile=0x129df40, lpFindFileData=0xdfe1ac | out: lpFindFileData=0xdfe1ac) returned 1 [0042.747] AreFileApisANSI () returned 1 [0042.747] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0042.747] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.751] GetFileType (hFile=0xb0) returned 0x1 [0042.751] SetLastError (dwErrCode=0x0) [0042.751] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.752] CloseHandle (hObject=0xb0) returned 1 [0042.752] AreFileApisANSI () returned 1 [0042.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0042.753] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.753] GetFileType (hFile=0xb0) returned 0x1 [0042.753] SetLastError (dwErrCode=0x0) [0042.753] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.755] CloseHandle (hObject=0xb0) returned 1 [0042.755] AreFileApisANSI () returned 1 [0042.755] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0042.755] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfd520, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0042.758] GetFileType (hFile=0xb0) returned 0x1 [0042.758] SetLastError (dwErrCode=0x0) [0042.758] WriteFile (in: hFile=0xb0, lpBuffer=0xdfc1cc*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfc1c4, lpOverlapped=0x0 | out: lpBuffer=0xdfc1cc*, lpNumberOfBytesWritten=0xdfc1c4*=0x423, lpOverlapped=0x0) returned 1 [0042.759] CloseHandle (hObject=0xb0) returned 1 [0042.759] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\*", lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 0x129db00 [0042.759] FindNextFileA (in: hFindFile=0x129db00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.759] FindNextFileA (in: hFindFile=0x129db00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.760] FindNextFileA (in: hFindFile=0x129db00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.760] FindNextFileA (in: hFindFile=0x129db00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.760] FindNextFileA (in: hFindFile=0x129db00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.760] AreFileApisANSI () returned 1 [0042.760] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0042.760] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\designer\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfcbc0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0042.762] GetFileType (hFile=0xb4) returned 0x1 [0042.762] SetLastError (dwErrCode=0x0) [0042.762] WriteFile (in: hFile=0xb4, lpBuffer=0xdfb86c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfb864, lpOverlapped=0x0 | out: lpBuffer=0xdfb86c*, lpNumberOfBytesWritten=0xdfb864*=0x423, lpOverlapped=0x0) returned 1 [0042.763] CloseHandle (hObject=0xb4) returned 1 [0042.763] AreFileApisANSI () returned 1 [0042.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0042.763] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\designer\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfcbc0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0042.764] GetFileType (hFile=0xb4) returned 0x1 [0042.764] SetLastError (dwErrCode=0x0) [0042.764] WriteFile (in: hFile=0xb4, lpBuffer=0xdfb86c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfb864, lpOverlapped=0x0 | out: lpBuffer=0xdfb86c*, lpNumberOfBytesWritten=0xdfb864*=0x423, lpOverlapped=0x0) returned 1 [0042.764] CloseHandle (hObject=0xb4) returned 1 [0042.765] AreFileApisANSI () returned 1 [0042.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0042.765] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\designer\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfcbc0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0042.767] GetFileType (hFile=0xb4) returned 0x1 [0042.767] SetLastError (dwErrCode=0x0) [0042.767] WriteFile (in: hFile=0xb4, lpBuffer=0xdfb86c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfb864, lpOverlapped=0x0 | out: lpBuffer=0xdfb86c*, lpNumberOfBytesWritten=0xdfb864*=0x423, lpOverlapped=0x0) returned 1 [0042.768] CloseHandle (hObject=0xb4) returned 1 [0042.768] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 0x129df80 [0042.768] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 1 [0042.768] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 1 [0042.768] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 1 [0042.768] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 1 [0042.768] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 1 [0042.768] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 0 [0042.768] FindClose (in: hFindFile=0x129df80 | out: hFindFile=0x129df80) returned 1 [0042.768] FindNextFileA (in: hFindFile=0x129db00, lpFindFileData=0xdfd84c | out: lpFindFileData=0xdfd84c) returned 1 [0042.768] AreFileApisANSI () returned 1 [0042.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0042.768] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfcbc0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0042.769] GetFileType (hFile=0xb4) returned 0x1 [0042.769] SetLastError (dwErrCode=0x0) [0042.769] WriteFile (in: hFile=0xb4, lpBuffer=0xdfb86c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfb864, lpOverlapped=0x0 | out: lpBuffer=0xdfb86c*, lpNumberOfBytesWritten=0xdfb864*=0x423, lpOverlapped=0x0) returned 1 [0042.770] CloseHandle (hObject=0xb4) returned 1 [0042.770] AreFileApisANSI () returned 1 [0042.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0042.770] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfcbc0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0042.770] GetFileType (hFile=0xb4) returned 0x1 [0042.770] SetLastError (dwErrCode=0x0) [0042.770] WriteFile (in: hFile=0xb4, lpBuffer=0xdfb86c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfb864, lpOverlapped=0x0 | out: lpBuffer=0xdfb86c*, lpNumberOfBytesWritten=0xdfb864*=0x423, lpOverlapped=0x0) returned 1 [0042.771] CloseHandle (hObject=0xb4) returned 1 [0042.771] AreFileApisANSI () returned 1 [0042.771] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0042.771] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfcbc0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0042.772] GetFileType (hFile=0xb4) returned 0x1 [0042.772] SetLastError (dwErrCode=0x0) [0042.772] WriteFile (in: hFile=0xb4, lpBuffer=0xdfb86c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfb864, lpOverlapped=0x0 | out: lpBuffer=0xdfb86c*, lpNumberOfBytesWritten=0xdfb864*=0x423, lpOverlapped=0x0) returned 1 [0042.773] CloseHandle (hObject=0xb4) returned 1 [0042.773] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 0x129db40 [0042.773] FindNextFileA (in: hFindFile=0x129db40, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 1 [0042.773] FindNextFileA (in: hFindFile=0x129db40, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 1 [0042.773] AreFileApisANSI () returned 1 [0042.773] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0042.773] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfc260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0042.774] GetFileType (hFile=0xb8) returned 0x1 [0042.774] SetLastError (dwErrCode=0x0) [0042.774] WriteFile (in: hFile=0xb8, lpBuffer=0xdfaf0c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfaf04, lpOverlapped=0x0 | out: lpBuffer=0xdfaf0c*, lpNumberOfBytesWritten=0xdfaf04*=0x423, lpOverlapped=0x0) returned 1 [0042.775] CloseHandle (hObject=0xb8) returned 1 [0042.775] AreFileApisANSI () returned 1 [0042.775] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0042.775] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfc260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0042.775] GetFileType (hFile=0xb8) returned 0x1 [0042.775] SetLastError (dwErrCode=0x0) [0042.775] WriteFile (in: hFile=0xb8, lpBuffer=0xdfaf0c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfaf04, lpOverlapped=0x0 | out: lpBuffer=0xdfaf0c*, lpNumberOfBytesWritten=0xdfaf04*=0x423, lpOverlapped=0x0) returned 1 [0042.776] CloseHandle (hObject=0xb8) returned 1 [0042.776] AreFileApisANSI () returned 1 [0042.776] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0042.776] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfc260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0042.777] GetFileType (hFile=0xb8) returned 0x1 [0042.777] SetLastError (dwErrCode=0x0) [0042.777] WriteFile (in: hFile=0xb8, lpBuffer=0xdfaf0c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfaf04, lpOverlapped=0x0 | out: lpBuffer=0xdfaf0c*, lpNumberOfBytesWritten=0xdfaf04*=0x423, lpOverlapped=0x0) returned 1 [0042.777] CloseHandle (hObject=0xb8) returned 1 [0042.778] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 0x129dc00 [0042.778] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.795] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.795] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.795] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.795] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.795] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.795] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.795] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.795] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.795] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.795] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.795] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.795] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.795] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.795] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.795] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.795] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.795] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.796] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.796] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.796] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.796] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.796] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.796] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.796] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.796] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.796] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.856] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.856] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.856] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.856] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.856] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.856] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.856] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.856] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.856] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.856] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.856] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.856] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.856] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.856] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.857] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.857] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.857] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.857] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.857] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.857] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.857] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.857] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.857] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.857] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.857] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.857] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.857] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.857] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.857] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.857] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.857] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.870] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.871] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.871] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.872] AreFileApisANSI () returned 1 [0042.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0042.872] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\placeholder.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\placeholder.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0xdfc224, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.873] GetFileType (hFile=0xbc) returned 0x1 [0042.873] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d4 | out: lpNewFilePointer=0x0) returned 1 [0042.873] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc288 | out: lpNewFilePointer=0x0) returned 1 [0042.873] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2b8 | out: lpNewFilePointer=0x0) returned 1 [0042.873] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0042.873] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0042.873] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2b8 | out: lpNewFilePointer=0x0) returned 1 [0042.873] CloseHandle (hObject=0xbc) returned 1 [0042.873] AreFileApisANSI () returned 1 [0042.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0042.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0042.873] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\placeholder.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\placeholder.txt"), lpNewFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\placeholder.txt.cryptoid" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\placeholder.txt.cryptoid"), dwFlags=0x2) returned 1 [0042.874] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.874] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.874] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.874] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.874] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.874] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.874] AreFileApisANSI () returned 1 [0042.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f4d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0042.874] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\Updates\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\updates\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.877] GetFileType (hFile=0xbc) returned 0x1 [0042.877] SetLastError (dwErrCode=0x0) [0042.877] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.881] CloseHandle (hObject=0xbc) returned 1 [0042.881] AreFileApisANSI () returned 1 [0042.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128fc58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0042.881] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\Updates\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\updates\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.884] GetFileType (hFile=0xbc) returned 0x1 [0042.884] SetLastError (dwErrCode=0x0) [0042.884] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.885] CloseHandle (hObject=0xbc) returned 1 [0042.885] AreFileApisANSI () returned 1 [0042.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0042.885] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\Updates\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\updates\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.885] GetFileType (hFile=0xbc) returned 0x1 [0042.886] SetLastError (dwErrCode=0x0) [0042.886] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.886] CloseHandle (hObject=0xbc) returned 1 [0042.887] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\Updates\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129db80 [0042.887] FindNextFileA (in: hFindFile=0x129db80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.887] FindNextFileA (in: hFindFile=0x129db80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.887] AreFileApisANSI () returned 1 [0042.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x129a6e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0042.887] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\Updates\\16.0.11126.20196\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\updates\\16.0.11126.20196\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0042.889] GetFileType (hFile=0xc0) returned 0x1 [0042.889] SetLastError (dwErrCode=0x0) [0042.889] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0042.890] CloseHandle (hObject=0xc0) returned 1 [0042.890] AreFileApisANSI () returned 1 [0042.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x129a6e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0042.890] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\Updates\\16.0.11126.20196\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\updates\\16.0.11126.20196\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0042.895] GetFileType (hFile=0xc0) returned 0x1 [0042.895] SetLastError (dwErrCode=0x0) [0042.895] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0042.896] CloseHandle (hObject=0xc0) returned 1 [0042.896] AreFileApisANSI () returned 1 [0042.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x129a6e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0042.896] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\Updates\\16.0.11126.20196\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\updates\\16.0.11126.20196\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0042.896] GetFileType (hFile=0xc0) returned 0x1 [0042.897] SetLastError (dwErrCode=0x0) [0042.897] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0042.898] CloseHandle (hObject=0xc0) returned 1 [0042.898] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\Updates\\16.0.11126.20196\\*", lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0x129de00 [0042.898] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0042.898] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0042.898] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0042.898] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0042.898] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0 [0042.898] FindClose (in: hFindFile=0x129de00 | out: hFindFile=0x129de00) returned 1 [0042.898] FindNextFileA (in: hFindFile=0x129db80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.898] FindNextFileA (in: hFindFile=0x129db80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.898] FindNextFileA (in: hFindFile=0x129db80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.898] FindNextFileA (in: hFindFile=0x129db80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0042.898] FindClose (in: hFindFile=0x129db80 | out: hFindFile=0x129db80) returned 1 [0042.898] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.898] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.898] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 0 [0042.898] FindClose (in: hFindFile=0x129dc00 | out: hFindFile=0x129dc00) returned 1 [0042.898] FindNextFileA (in: hFindFile=0x129db40, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 1 [0042.898] FindNextFileA (in: hFindFile=0x129db40, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 1 [0042.899] FindNextFileA (in: hFindFile=0x129db40, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 1 [0042.899] FindNextFileA (in: hFindFile=0x129db40, lpFindFileData=0xdfceec | out: lpFindFileData=0xdfceec) returned 1 [0042.899] AreFileApisANSI () returned 1 [0042.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0042.899] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfc260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0042.924] GetFileType (hFile=0xb8) returned 0x1 [0042.925] SetLastError (dwErrCode=0x0) [0042.925] WriteFile (in: hFile=0xb8, lpBuffer=0xdfaf0c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfaf04, lpOverlapped=0x0 | out: lpBuffer=0xdfaf0c*, lpNumberOfBytesWritten=0xdfaf04*=0x423, lpOverlapped=0x0) returned 1 [0042.925] CloseHandle (hObject=0xb8) returned 1 [0042.926] AreFileApisANSI () returned 1 [0042.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0042.926] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfc260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0042.926] GetFileType (hFile=0xb8) returned 0x1 [0042.926] SetLastError (dwErrCode=0x0) [0042.926] WriteFile (in: hFile=0xb8, lpBuffer=0xdfaf0c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfaf04, lpOverlapped=0x0 | out: lpBuffer=0xdfaf0c*, lpNumberOfBytesWritten=0xdfaf04*=0x423, lpOverlapped=0x0) returned 1 [0042.927] CloseHandle (hObject=0xb8) returned 1 [0042.927] AreFileApisANSI () returned 1 [0042.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0042.927] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfc260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0042.929] GetFileType (hFile=0xb8) returned 0x1 [0042.929] SetLastError (dwErrCode=0x0) [0042.929] WriteFile (in: hFile=0xb8, lpBuffer=0xdfaf0c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfaf04, lpOverlapped=0x0 | out: lpBuffer=0xdfaf0c*, lpNumberOfBytesWritten=0xdfaf04*=0x423, lpOverlapped=0x0) returned 1 [0042.930] CloseHandle (hObject=0xb8) returned 1 [0042.930] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 0x129de00 [0042.930] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.931] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.931] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.931] AreFileApisANSI () returned 1 [0042.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0042.931] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.931] GetFileType (hFile=0xbc) returned 0x1 [0042.931] SetLastError (dwErrCode=0x0) [0042.931] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.932] CloseHandle (hObject=0xbc) returned 1 [0042.932] AreFileApisANSI () returned 1 [0042.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0042.932] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.933] GetFileType (hFile=0xbc) returned 0x1 [0042.933] SetLastError (dwErrCode=0x0) [0042.933] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.934] CloseHandle (hObject=0xbc) returned 1 [0042.934] AreFileApisANSI () returned 1 [0042.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0042.934] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.941] GetFileType (hFile=0xbc) returned 0x1 [0042.941] SetLastError (dwErrCode=0x0) [0042.941] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.942] CloseHandle (hObject=0xbc) returned 1 [0042.942] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129dd80 [0042.942] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.942] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.942] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.942] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.942] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.943] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0042.943] FindClose (in: hFindFile=0x129dd80 | out: hFindFile=0x129dd80) returned 1 [0042.943] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.943] AreFileApisANSI () returned 1 [0042.943] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0042.943] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.943] GetFileType (hFile=0xbc) returned 0x1 [0042.943] SetLastError (dwErrCode=0x0) [0042.943] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.944] CloseHandle (hObject=0xbc) returned 1 [0042.945] AreFileApisANSI () returned 1 [0042.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0042.945] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.945] GetFileType (hFile=0xbc) returned 0x1 [0042.945] SetLastError (dwErrCode=0x0) [0042.945] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.946] CloseHandle (hObject=0xbc) returned 1 [0042.946] AreFileApisANSI () returned 1 [0042.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0042.946] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.949] GetFileType (hFile=0xbc) returned 0x1 [0042.949] SetLastError (dwErrCode=0x0) [0042.949] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.950] CloseHandle (hObject=0xbc) returned 1 [0042.950] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129dc00 [0042.951] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.951] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.951] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.951] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.951] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.951] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0042.951] FindClose (in: hFindFile=0x129dc00 | out: hFindFile=0x129dc00) returned 1 [0042.951] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.951] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.951] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.951] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.951] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.951] AreFileApisANSI () returned 1 [0042.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0042.951] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.951] GetFileType (hFile=0xbc) returned 0x1 [0042.951] SetLastError (dwErrCode=0x0) [0042.952] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.952] CloseHandle (hObject=0xbc) returned 1 [0042.952] AreFileApisANSI () returned 1 [0042.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0042.952] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.955] GetFileType (hFile=0xbc) returned 0x1 [0042.955] SetLastError (dwErrCode=0x0) [0042.955] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.956] CloseHandle (hObject=0xbc) returned 1 [0042.956] AreFileApisANSI () returned 1 [0042.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0042.956] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.959] GetFileType (hFile=0xbc) returned 0x1 [0042.959] SetLastError (dwErrCode=0x0) [0042.959] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.960] CloseHandle (hObject=0xbc) returned 1 [0042.960] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129dc80 [0042.960] FindNextFileA (in: hFindFile=0x129dc80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.960] FindNextFileA (in: hFindFile=0x129dc80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.961] FindNextFileA (in: hFindFile=0x129dc80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.961] FindNextFileA (in: hFindFile=0x129dc80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.961] FindNextFileA (in: hFindFile=0x129dc80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.961] FindNextFileA (in: hFindFile=0x129dc80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0042.961] FindClose (in: hFindFile=0x129dc80 | out: hFindFile=0x129dc80) returned 1 [0042.961] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.961] AreFileApisANSI () returned 1 [0042.961] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0042.961] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.964] GetFileType (hFile=0xbc) returned 0x1 [0042.964] SetLastError (dwErrCode=0x0) [0042.964] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.964] CloseHandle (hObject=0xbc) returned 1 [0042.965] AreFileApisANSI () returned 1 [0042.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0042.965] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.965] GetFileType (hFile=0xbc) returned 0x1 [0042.965] SetLastError (dwErrCode=0x0) [0042.965] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.966] CloseHandle (hObject=0xbc) returned 1 [0042.966] AreFileApisANSI () returned 1 [0042.966] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0042.966] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.970] GetFileType (hFile=0xbc) returned 0x1 [0042.971] SetLastError (dwErrCode=0x0) [0042.971] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.971] CloseHandle (hObject=0xbc) returned 1 [0042.972] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129de40 [0042.972] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.972] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.972] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.972] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.972] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.972] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0042.972] FindClose (in: hFindFile=0x129de40 | out: hFindFile=0x129de40) returned 1 [0042.972] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.972] AreFileApisANSI () returned 1 [0042.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0042.972] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.973] GetFileType (hFile=0xbc) returned 0x1 [0042.973] SetLastError (dwErrCode=0x0) [0042.973] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.973] CloseHandle (hObject=0xbc) returned 1 [0042.974] AreFileApisANSI () returned 1 [0042.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0042.974] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.981] GetFileType (hFile=0xbc) returned 0x1 [0042.981] SetLastError (dwErrCode=0x0) [0042.981] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.982] CloseHandle (hObject=0xbc) returned 1 [0042.982] AreFileApisANSI () returned 1 [0042.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0042.982] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.985] GetFileType (hFile=0xbc) returned 0x1 [0042.985] SetLastError (dwErrCode=0x0) [0042.985] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.986] CloseHandle (hObject=0xbc) returned 1 [0042.986] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129dec0 [0042.986] FindNextFileA (in: hFindFile=0x129dec0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.986] FindNextFileA (in: hFindFile=0x129dec0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.986] FindNextFileA (in: hFindFile=0x129dec0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.986] FindNextFileA (in: hFindFile=0x129dec0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.986] FindNextFileA (in: hFindFile=0x129dec0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.986] FindNextFileA (in: hFindFile=0x129dec0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0042.986] FindClose (in: hFindFile=0x129dec0 | out: hFindFile=0x129dec0) returned 1 [0042.986] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.986] AreFileApisANSI () returned 1 [0042.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0042.986] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.987] GetFileType (hFile=0xbc) returned 0x1 [0042.987] SetLastError (dwErrCode=0x0) [0042.987] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.988] CloseHandle (hObject=0xbc) returned 1 [0042.988] AreFileApisANSI () returned 1 [0042.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0042.988] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.989] GetFileType (hFile=0xbc) returned 0x1 [0042.989] SetLastError (dwErrCode=0x0) [0042.989] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.989] CloseHandle (hObject=0xbc) returned 1 [0042.990] AreFileApisANSI () returned 1 [0042.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0042.990] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0042.998] GetFileType (hFile=0xbc) returned 0x1 [0042.998] SetLastError (dwErrCode=0x0) [0042.998] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0042.998] CloseHandle (hObject=0xbc) returned 1 [0042.999] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129d940 [0042.999] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.999] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.999] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.999] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.999] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0042.999] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0042.999] FindClose (in: hFindFile=0x129d940 | out: hFindFile=0x129d940) returned 1 [0042.999] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0042.999] AreFileApisANSI () returned 1 [0042.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0042.999] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.000] GetFileType (hFile=0xbc) returned 0x1 [0043.000] SetLastError (dwErrCode=0x0) [0043.000] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.001] CloseHandle (hObject=0xbc) returned 1 [0043.001] AreFileApisANSI () returned 1 [0043.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.001] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.027] GetFileType (hFile=0xbc) returned 0x1 [0043.027] SetLastError (dwErrCode=0x0) [0043.027] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.028] CloseHandle (hObject=0xbc) returned 1 [0043.028] AreFileApisANSI () returned 1 [0043.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.028] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.032] GetFileType (hFile=0xbc) returned 0x1 [0043.032] SetLastError (dwErrCode=0x0) [0043.032] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.033] CloseHandle (hObject=0xbc) returned 1 [0043.033] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129d9c0 [0043.033] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.033] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.033] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.033] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.033] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.033] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0043.033] FindClose (in: hFindFile=0x129d9c0 | out: hFindFile=0x129d9c0) returned 1 [0043.033] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.033] AreFileApisANSI () returned 1 [0043.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.033] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.044] GetFileType (hFile=0xbc) returned 0x1 [0043.045] SetLastError (dwErrCode=0x0) [0043.045] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.045] CloseHandle (hObject=0xbc) returned 1 [0043.046] AreFileApisANSI () returned 1 [0043.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.046] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.047] GetFileType (hFile=0xbc) returned 0x1 [0043.047] SetLastError (dwErrCode=0x0) [0043.047] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.049] CloseHandle (hObject=0xbc) returned 1 [0043.049] AreFileApisANSI () returned 1 [0043.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.049] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.049] GetFileType (hFile=0xbc) returned 0x1 [0043.049] SetLastError (dwErrCode=0x0) [0043.049] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.051] CloseHandle (hObject=0xbc) returned 1 [0043.051] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129dbc0 [0043.051] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.051] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.051] AreFileApisANSI () returned 1 [0043.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.051] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb8c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0043.052] GetLastError () returned 0x5 [0043.052] GetLastError () returned 0x5 [0043.052] SetLastError (dwErrCode=0x5) [0043.052] GetLastError () returned 0x5 [0043.052] SetLastError (dwErrCode=0x5) [0043.052] GetLastError () returned 0x5 [0043.052] SetLastError (dwErrCode=0x5) [0043.052] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.052] AreFileApisANSI () returned 1 [0043.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0043.052] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb8c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0043.052] GetLastError () returned 0x5 [0043.052] GetLastError () returned 0x5 [0043.052] SetLastError (dwErrCode=0x5) [0043.052] GetLastError () returned 0x5 [0043.052] SetLastError (dwErrCode=0x5) [0043.052] GetLastError () returned 0x5 [0043.052] SetLastError (dwErrCode=0x5) [0043.052] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.052] AreFileApisANSI () returned 1 [0043.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0043.052] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb8c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0043.076] GetLastError () returned 0x5 [0043.076] GetLastError () returned 0x5 [0043.076] SetLastError (dwErrCode=0x5) [0043.076] GetLastError () returned 0x5 [0043.076] SetLastError (dwErrCode=0x5) [0043.076] GetLastError () returned 0x5 [0043.076] SetLastError (dwErrCode=0x5) [0043.076] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.076] AreFileApisANSI () returned 1 [0043.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0043.076] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb8c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0043.076] GetLastError () returned 0x5 [0043.076] GetLastError () returned 0x5 [0043.076] SetLastError (dwErrCode=0x5) [0043.076] GetLastError () returned 0x5 [0043.076] SetLastError (dwErrCode=0x5) [0043.076] GetLastError () returned 0x5 [0043.077] SetLastError (dwErrCode=0x5) [0043.077] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.077] AreFileApisANSI () returned 1 [0043.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0043.077] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb8c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0043.079] GetLastError () returned 0x5 [0043.079] GetLastError () returned 0x5 [0043.079] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.079] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.079] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.079] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.079] AreFileApisANSI () returned 1 [0043.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0043.079] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb8c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0043.079] GetLastError () returned 0x5 [0043.079] GetLastError () returned 0x5 [0043.079] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.079] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.079] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.079] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.079] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.079] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.079] AreFileApisANSI () returned 1 [0043.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0043.080] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb8c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0043.093] GetLastError () returned 0x5 [0043.093] GetLastError () returned 0x5 [0043.093] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.093] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.093] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.093] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.093] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.093] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.093] AreFileApisANSI () returned 1 [0043.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0043.093] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb8c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0043.119] GetLastError () returned 0x5 [0043.119] GetLastError () returned 0x5 [0043.119] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.119] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.119] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.119] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.119] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.119] FindNextFileA (in: hFindFile=0x129dbc0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0043.119] FindClose (in: hFindFile=0x129dbc0 | out: hFindFile=0x129dbc0) returned 1 [0043.119] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.119] AreFileApisANSI () returned 1 [0043.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.119] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.123] GetFileType (hFile=0xbc) returned 0x1 [0043.123] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.125] CloseHandle (hObject=0xbc) returned 1 [0043.125] AreFileApisANSI () returned 1 [0043.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.125] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.127] GetFileType (hFile=0xbc) returned 0x1 [0043.127] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.129] CloseHandle (hObject=0xbc) returned 1 [0043.129] AreFileApisANSI () returned 1 [0043.129] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.129] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.134] GetFileType (hFile=0xbc) returned 0x1 [0043.134] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.135] CloseHandle (hObject=0xbc) returned 1 [0043.135] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129de80 [0043.136] FindNextFileA (in: hFindFile=0x129de80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.136] FindNextFileA (in: hFindFile=0x129de80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.136] FindNextFileA (in: hFindFile=0x129de80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.136] FindNextFileA (in: hFindFile=0x129de80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.136] FindNextFileA (in: hFindFile=0x129de80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.136] FindNextFileA (in: hFindFile=0x129de80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0043.136] FindClose (in: hFindFile=0x129de80 | out: hFindFile=0x129de80) returned 1 [0043.136] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.136] AreFileApisANSI () returned 1 [0043.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.136] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.137] GetFileType (hFile=0xbc) returned 0x1 [0043.137] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.138] CloseHandle (hObject=0xbc) returned 1 [0043.138] AreFileApisANSI () returned 1 [0043.138] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.138] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.140] GetFileType (hFile=0xbc) returned 0x1 [0043.140] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.141] CloseHandle (hObject=0xbc) returned 1 [0043.142] AreFileApisANSI () returned 1 [0043.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.142] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.145] GetFileType (hFile=0xbc) returned 0x1 [0043.145] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.148] CloseHandle (hObject=0xbc) returned 1 [0043.148] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129dec0 [0043.148] FindNextFileA (in: hFindFile=0x129dec0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.148] FindNextFileA (in: hFindFile=0x129dec0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.149] FindNextFileA (in: hFindFile=0x129dec0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.149] FindNextFileA (in: hFindFile=0x129dec0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.149] FindNextFileA (in: hFindFile=0x129dec0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.149] FindNextFileA (in: hFindFile=0x129dec0, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0043.149] FindClose (in: hFindFile=0x129dec0 | out: hFindFile=0x129dec0) returned 1 [0043.149] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.149] AreFileApisANSI () returned 1 [0043.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.149] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.155] GetFileType (hFile=0xbc) returned 0x1 [0043.155] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.156] CloseHandle (hObject=0xbc) returned 1 [0043.156] AreFileApisANSI () returned 1 [0043.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.156] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.159] GetFileType (hFile=0xbc) returned 0x1 [0043.159] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.160] CloseHandle (hObject=0xbc) returned 1 [0043.160] AreFileApisANSI () returned 1 [0043.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.160] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.165] GetFileType (hFile=0xbc) returned 0x1 [0043.165] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.166] CloseHandle (hObject=0xbc) returned 1 [0043.167] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129de40 [0043.167] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.167] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.167] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.167] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.167] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.167] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0043.167] FindClose (in: hFindFile=0x129de40 | out: hFindFile=0x129de40) returned 1 [0043.167] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.167] AreFileApisANSI () returned 1 [0043.167] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.167] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.215] GetFileType (hFile=0xbc) returned 0x1 [0043.215] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.216] CloseHandle (hObject=0xbc) returned 1 [0043.216] AreFileApisANSI () returned 1 [0043.216] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.216] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.216] GetFileType (hFile=0xbc) returned 0x1 [0043.216] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.217] CloseHandle (hObject=0xbc) returned 1 [0043.217] AreFileApisANSI () returned 1 [0043.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.217] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.221] GetFileType (hFile=0xbc) returned 0x1 [0043.221] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.222] CloseHandle (hObject=0xbc) returned 1 [0043.222] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129d840 [0043.222] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.222] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.222] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.222] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.222] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.222] FindNextFileA (in: hFindFile=0x129d840, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0043.222] FindClose (in: hFindFile=0x129d840 | out: hFindFile=0x129d840) returned 1 [0043.222] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.222] AreFileApisANSI () returned 1 [0043.222] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0043.222] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0xdfc224, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0043.223] GetLastError () returned 0x5 [0043.224] GetLastError () returned 0x5 [0043.224] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.224] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.224] AreFileApisANSI () returned 1 [0043.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.224] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.225] GetFileType (hFile=0xbc) returned 0x1 [0043.225] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.226] CloseHandle (hObject=0xbc) returned 1 [0043.226] AreFileApisANSI () returned 1 [0043.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.226] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.227] GetFileType (hFile=0xbc) returned 0x1 [0043.227] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.228] CloseHandle (hObject=0xbc) returned 1 [0043.228] AreFileApisANSI () returned 1 [0043.228] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.228] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.231] GetFileType (hFile=0xbc) returned 0x1 [0043.231] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.232] CloseHandle (hObject=0xbc) returned 1 [0043.232] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129dc40 [0043.232] FindNextFileA (in: hFindFile=0x129dc40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.232] FindNextFileA (in: hFindFile=0x129dc40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.232] FindNextFileA (in: hFindFile=0x129dc40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.232] FindNextFileA (in: hFindFile=0x129dc40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.232] FindNextFileA (in: hFindFile=0x129dc40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.232] FindNextFileA (in: hFindFile=0x129dc40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0043.232] FindClose (in: hFindFile=0x129dc40 | out: hFindFile=0x129dc40) returned 1 [0043.232] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.233] AreFileApisANSI () returned 1 [0043.233] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.233] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.233] GetFileType (hFile=0xbc) returned 0x1 [0043.233] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.234] CloseHandle (hObject=0xbc) returned 1 [0043.234] AreFileApisANSI () returned 1 [0043.234] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.234] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.235] GetFileType (hFile=0xbc) returned 0x1 [0043.236] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.236] CloseHandle (hObject=0xbc) returned 1 [0043.237] AreFileApisANSI () returned 1 [0043.237] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.237] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.245] GetFileType (hFile=0xbc) returned 0x1 [0043.245] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.246] CloseHandle (hObject=0xbc) returned 1 [0043.247] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129de40 [0043.247] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.247] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.247] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.247] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.247] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.247] FindNextFileA (in: hFindFile=0x129de40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0043.247] FindClose (in: hFindFile=0x129de40 | out: hFindFile=0x129de40) returned 1 [0043.247] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.247] AreFileApisANSI () returned 1 [0043.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f3d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0043.247] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.250] GetFileType (hFile=0xbc) returned 0x1 [0043.250] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.250] CloseHandle (hObject=0xbc) returned 1 [0043.251] AreFileApisANSI () returned 1 [0043.251] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128fb58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0043.251] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.254] GetFileType (hFile=0xbc) returned 0x1 [0043.254] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.255] CloseHandle (hObject=0xbc) returned 1 [0043.255] AreFileApisANSI () returned 1 [0043.255] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f958, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0043.255] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.261] GetFileType (hFile=0xbc) returned 0x1 [0043.261] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.262] CloseHandle (hObject=0xbc) returned 1 [0043.262] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129dd80 [0043.262] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.262] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.262] AreFileApisANSI () returned 1 [0043.262] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f158, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0043.262] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.285] GetFileType (hFile=0xc0) returned 0x1 [0043.285] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.286] CloseHandle (hObject=0xc0) returned 1 [0043.286] AreFileApisANSI () returned 1 [0043.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f758, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0043.286] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.286] GetFileType (hFile=0xc0) returned 0x1 [0043.286] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.287] CloseHandle (hObject=0xc0) returned 1 [0043.287] AreFileApisANSI () returned 1 [0043.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f058, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0043.287] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.293] GetFileType (hFile=0xc0) returned 0x1 [0043.293] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.294] CloseHandle (hObject=0xc0) returned 1 [0043.294] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0x129dd00 [0043.295] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.295] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.295] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.295] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.295] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.295] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0 [0043.295] FindClose (in: hFindFile=0x129dd00 | out: hFindFile=0x129dd00) returned 1 [0043.295] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.295] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.295] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.295] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.295] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.295] AreFileApisANSI () returned 1 [0043.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128ee58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0043.295] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.295] GetFileType (hFile=0xc0) returned 0x1 [0043.295] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.296] CloseHandle (hObject=0xc0) returned 1 [0043.296] AreFileApisANSI () returned 1 [0043.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128fcd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0043.297] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.298] GetFileType (hFile=0xc0) returned 0x1 [0043.298] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.299] CloseHandle (hObject=0xc0) returned 1 [0043.300] AreFileApisANSI () returned 1 [0043.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f958, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0043.300] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.308] GetFileType (hFile=0xc0) returned 0x1 [0043.308] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.308] CloseHandle (hObject=0xc0) returned 1 [0043.309] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0x129ddc0 [0043.309] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.309] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.309] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.309] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.309] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.309] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0 [0043.309] FindClose (in: hFindFile=0x129ddc0 | out: hFindFile=0x129ddc0) returned 1 [0043.309] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.309] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.309] AreFileApisANSI () returned 1 [0043.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0043.309] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.309] GetFileType (hFile=0xc0) returned 0x1 [0043.310] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.310] CloseHandle (hObject=0xc0) returned 1 [0043.313] AreFileApisANSI () returned 1 [0043.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128fc58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0043.313] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.316] GetFileType (hFile=0xc0) returned 0x1 [0043.316] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.317] CloseHandle (hObject=0xc0) returned 1 [0043.317] AreFileApisANSI () returned 1 [0043.317] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128fb58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0043.317] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.319] GetFileType (hFile=0xc0) returned 0x1 [0043.319] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.320] CloseHandle (hObject=0xc0) returned 1 [0043.320] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0x129ddc0 [0043.320] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.320] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.320] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.320] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.320] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.320] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.320] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.320] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0 [0043.320] FindClose (in: hFindFile=0x129ddc0 | out: hFindFile=0x129ddc0) returned 1 [0043.321] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.321] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.321] AreFileApisANSI () returned 1 [0043.321] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128efd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0043.321] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.323] GetFileType (hFile=0xc0) returned 0x1 [0043.323] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.325] CloseHandle (hObject=0xc0) returned 1 [0043.325] AreFileApisANSI () returned 1 [0043.325] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128fc58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0043.325] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.325] GetFileType (hFile=0xc0) returned 0x1 [0043.325] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.326] CloseHandle (hObject=0xc0) returned 1 [0043.326] AreFileApisANSI () returned 1 [0043.326] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128fb58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0043.326] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.328] GetFileType (hFile=0xc0) returned 0x1 [0043.328] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.328] CloseHandle (hObject=0xc0) returned 1 [0043.329] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0x129d940 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0 [0043.329] FindClose (in: hFindFile=0x129d940 | out: hFindFile=0x129d940) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.329] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.329] AreFileApisANSI () returned 1 [0043.329] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f5d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0043.329] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.331] GetFileType (hFile=0xc0) returned 0x1 [0043.331] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.331] CloseHandle (hObject=0xc0) returned 1 [0043.332] AreFileApisANSI () returned 1 [0043.332] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128eed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0043.332] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.336] GetFileType (hFile=0xc0) returned 0x1 [0043.336] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.336] CloseHandle (hObject=0xc0) returned 1 [0043.337] AreFileApisANSI () returned 1 [0043.337] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f4d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0043.337] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.341] GetFileType (hFile=0xc0) returned 0x1 [0043.341] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.342] CloseHandle (hObject=0xc0) returned 1 [0043.342] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0x129df80 [0043.342] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.342] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.342] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.342] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.342] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.342] FindNextFileA (in: hFindFile=0x129df80, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0 [0043.342] FindClose (in: hFindFile=0x129df80 | out: hFindFile=0x129df80) returned 1 [0043.342] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.342] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.342] AreFileApisANSI () returned 1 [0043.342] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128eed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0043.342] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.343] GetFileType (hFile=0xc0) returned 0x1 [0043.343] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.344] CloseHandle (hObject=0xc0) returned 1 [0043.344] AreFileApisANSI () returned 1 [0043.344] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f158, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0043.344] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.346] GetFileType (hFile=0xc0) returned 0x1 [0043.346] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.347] CloseHandle (hObject=0xc0) returned 1 [0043.347] AreFileApisANSI () returned 1 [0043.347] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128fcd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0043.347] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.349] GetFileType (hFile=0xc0) returned 0x1 [0043.349] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.350] CloseHandle (hObject=0xc0) returned 1 [0043.351] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0x129dc00 [0043.351] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.351] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.351] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.351] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.351] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.351] FindNextFileA (in: hFindFile=0x129dc00, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0 [0043.351] FindClose (in: hFindFile=0x129dc00 | out: hFindFile=0x129dc00) returned 1 [0043.351] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.351] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.351] AreFileApisANSI () returned 1 [0043.351] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128ef58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0043.351] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.353] GetFileType (hFile=0xc0) returned 0x1 [0043.353] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.354] CloseHandle (hObject=0xc0) returned 1 [0043.354] AreFileApisANSI () returned 1 [0043.354] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128fc58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0043.354] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.355] GetFileType (hFile=0xc0) returned 0x1 [0043.355] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.356] CloseHandle (hObject=0xc0) returned 1 [0043.356] AreFileApisANSI () returned 1 [0043.356] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0043.356] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.358] GetFileType (hFile=0xc0) returned 0x1 [0043.359] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.359] CloseHandle (hObject=0xc0) returned 1 [0043.359] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0x129d880 [0043.360] FindNextFileA (in: hFindFile=0x129d880, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.360] FindNextFileA (in: hFindFile=0x129d880, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.360] FindNextFileA (in: hFindFile=0x129d880, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.360] FindNextFileA (in: hFindFile=0x129d880, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.360] FindNextFileA (in: hFindFile=0x129d880, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.360] FindNextFileA (in: hFindFile=0x129d880, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0 [0043.360] FindClose (in: hFindFile=0x129d880 | out: hFindFile=0x129d880) returned 1 [0043.360] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.360] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.360] AreFileApisANSI () returned 1 [0043.360] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128ee58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0043.360] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.362] GetFileType (hFile=0xc0) returned 0x1 [0043.362] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.363] CloseHandle (hObject=0xc0) returned 1 [0043.363] AreFileApisANSI () returned 1 [0043.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f6d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0043.363] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.366] GetFileType (hFile=0xc0) returned 0x1 [0043.366] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.367] CloseHandle (hObject=0xc0) returned 1 [0043.367] AreFileApisANSI () returned 1 [0043.367] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f6d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0043.367] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.368] GetFileType (hFile=0xc0) returned 0x1 [0043.368] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.369] CloseHandle (hObject=0xc0) returned 1 [0043.369] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0x129db80 [0043.369] FindNextFileA (in: hFindFile=0x129db80, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.369] FindNextFileA (in: hFindFile=0x129db80, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.369] FindNextFileA (in: hFindFile=0x129db80, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.369] FindNextFileA (in: hFindFile=0x129db80, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.369] FindNextFileA (in: hFindFile=0x129db80, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.369] FindNextFileA (in: hFindFile=0x129db80, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0 [0043.369] FindClose (in: hFindFile=0x129db80 | out: hFindFile=0x129db80) returned 1 [0043.369] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.369] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.369] AreFileApisANSI () returned 1 [0043.369] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0043.370] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.372] GetFileType (hFile=0xc0) returned 0x1 [0043.372] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.373] CloseHandle (hObject=0xc0) returned 1 [0043.373] AreFileApisANSI () returned 1 [0043.373] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0043.373] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.375] GetFileType (hFile=0xc0) returned 0x1 [0043.375] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.376] CloseHandle (hObject=0xc0) returned 1 [0043.376] AreFileApisANSI () returned 1 [0043.376] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f158, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0043.376] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.378] GetFileType (hFile=0xc0) returned 0x1 [0043.378] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.379] CloseHandle (hObject=0xc0) returned 1 [0043.379] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0x129ddc0 [0043.380] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.380] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.380] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.380] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.380] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.380] FindNextFileA (in: hFindFile=0x129ddc0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0 [0043.380] FindClose (in: hFindFile=0x129ddc0 | out: hFindFile=0x129ddc0) returned 1 [0043.380] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.380] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.380] AreFileApisANSI () returned 1 [0043.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f3d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0043.380] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.385] GetFileType (hFile=0xc0) returned 0x1 [0043.385] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.386] CloseHandle (hObject=0xc0) returned 1 [0043.386] AreFileApisANSI () returned 1 [0043.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0043.386] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.388] GetFileType (hFile=0xc0) returned 0x1 [0043.388] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.389] CloseHandle (hObject=0xc0) returned 1 [0043.389] AreFileApisANSI () returned 1 [0043.389] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f058, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0043.389] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfafa0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0043.392] GetFileType (hFile=0xc0) returned 0x1 [0043.392] WriteFile (in: hFile=0xc0, lpBuffer=0xdf9c4c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdf9c44, lpOverlapped=0x0 | out: lpBuffer=0xdf9c4c*, lpNumberOfBytesWritten=0xdf9c44*=0x423, lpOverlapped=0x0) returned 1 [0043.393] CloseHandle (hObject=0xc0) returned 1 [0043.393] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0x129d9c0 [0043.393] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.393] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.393] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.393] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.394] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.394] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.394] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 1 [0043.394] FindNextFileA (in: hFindFile=0x129d9c0, lpFindFileData=0xdfb2cc | out: lpFindFileData=0xdfb2cc) returned 0 [0043.394] FindClose (in: hFindFile=0x129d9c0 | out: hFindFile=0x129d9c0) returned 1 [0043.394] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.394] FindNextFileA (in: hFindFile=0x129dd80, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0043.394] FindClose (in: hFindFile=0x129dd80 | out: hFindFile=0x129dd80) returned 1 [0043.394] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.394] AreFileApisANSI () returned 1 [0043.394] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.394] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.394] GetFileType (hFile=0xbc) returned 0x1 [0043.394] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.395] CloseHandle (hObject=0xbc) returned 1 [0043.395] AreFileApisANSI () returned 1 [0043.395] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.395] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.396] GetFileType (hFile=0xbc) returned 0x1 [0043.396] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.396] CloseHandle (hObject=0xbc) returned 1 [0043.397] AreFileApisANSI () returned 1 [0043.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.397] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.407] GetFileType (hFile=0xbc) returned 0x1 [0043.407] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.408] CloseHandle (hObject=0xbc) returned 1 [0043.409] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129dd00 [0043.409] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.409] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.409] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.409] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.409] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.409] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0043.409] FindClose (in: hFindFile=0x129dd00 | out: hFindFile=0x129dd00) returned 1 [0043.409] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.409] AreFileApisANSI () returned 1 [0043.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.409] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.409] GetFileType (hFile=0xbc) returned 0x1 [0043.409] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.413] CloseHandle (hObject=0xbc) returned 1 [0043.413] AreFileApisANSI () returned 1 [0043.413] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.413] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.414] GetFileType (hFile=0xbc) returned 0x1 [0043.414] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.414] CloseHandle (hObject=0xbc) returned 1 [0043.415] AreFileApisANSI () returned 1 [0043.415] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.415] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.417] GetFileType (hFile=0xbc) returned 0x1 [0043.417] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.418] CloseHandle (hObject=0xbc) returned 1 [0043.418] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129d980 [0043.418] FindNextFileA (in: hFindFile=0x129d980, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.418] FindNextFileA (in: hFindFile=0x129d980, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.418] FindNextFileA (in: hFindFile=0x129d980, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.418] FindNextFileA (in: hFindFile=0x129d980, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.418] FindNextFileA (in: hFindFile=0x129d980, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.418] FindNextFileA (in: hFindFile=0x129d980, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0043.418] FindClose (in: hFindFile=0x129d980 | out: hFindFile=0x129d980) returned 1 [0043.419] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.419] AreFileApisANSI () returned 1 [0043.419] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.419] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.446] GetFileType (hFile=0xbc) returned 0x1 [0043.446] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.447] CloseHandle (hObject=0xbc) returned 1 [0043.447] AreFileApisANSI () returned 1 [0043.447] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.447] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.448] GetFileType (hFile=0xbc) returned 0x1 [0043.448] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.448] CloseHandle (hObject=0xbc) returned 1 [0043.449] AreFileApisANSI () returned 1 [0043.449] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.449] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.461] GetFileType (hFile=0xbc) returned 0x1 [0043.461] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.462] CloseHandle (hObject=0xbc) returned 1 [0043.463] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129d880 [0043.463] FindNextFileA (in: hFindFile=0x129d880, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.463] FindNextFileA (in: hFindFile=0x129d880, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.463] FindNextFileA (in: hFindFile=0x129d880, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.463] FindNextFileA (in: hFindFile=0x129d880, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.463] FindNextFileA (in: hFindFile=0x129d880, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.463] FindNextFileA (in: hFindFile=0x129d880, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0043.463] FindClose (in: hFindFile=0x129d880 | out: hFindFile=0x129d880) returned 1 [0043.463] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.463] AreFileApisANSI () returned 1 [0043.463] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0043.463] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0xdfc224, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0043.465] GetLastError () returned 0x5 [0043.465] GetLastError () returned 0x5 [0043.465] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.465] AreFileApisANSI () returned 1 [0043.465] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f4d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0043.465] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.465] GetFileType (hFile=0xbc) returned 0x1 [0043.465] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.466] CloseHandle (hObject=0xbc) returned 1 [0043.466] AreFileApisANSI () returned 1 [0043.466] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f258, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0043.467] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.467] GetFileType (hFile=0xbc) returned 0x1 [0043.467] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.468] CloseHandle (hObject=0xbc) returned 1 [0043.468] AreFileApisANSI () returned 1 [0043.468] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128edd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0043.468] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.510] GetFileType (hFile=0xbc) returned 0x1 [0043.510] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.511] CloseHandle (hObject=0xbc) returned 1 [0043.511] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129da40 [0043.512] FindNextFileA (in: hFindFile=0x129da40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.512] FindNextFileA (in: hFindFile=0x129da40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.512] FindNextFileA (in: hFindFile=0x129da40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.512] FindNextFileA (in: hFindFile=0x129da40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.512] FindNextFileA (in: hFindFile=0x129da40, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0043.512] FindClose (in: hFindFile=0x129da40 | out: hFindFile=0x129da40) returned 1 [0043.512] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.512] AreFileApisANSI () returned 1 [0043.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0043.512] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0xdfc224, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0043.515] GetLastError () returned 0x5 [0043.515] GetLastError () returned 0x5 [0043.515] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.515] AreFileApisANSI () returned 1 [0043.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0043.515] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0xdfc224, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0043.517] GetLastError () returned 0x5 [0043.517] GetLastError () returned 0x5 [0043.517] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.517] AreFileApisANSI () returned 1 [0043.517] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0043.517] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0xdfc224, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0043.537] GetLastError () returned 0x5 [0043.537] GetLastError () returned 0x5 [0043.537] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.537] AreFileApisANSI () returned 1 [0043.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0043.538] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0xdfc224, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0043.544] GetLastError () returned 0x5 [0043.544] GetLastError () returned 0x5 [0043.544] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.544] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.544] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.544] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.544] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.544] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.544] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.544] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.544] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.544] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.544] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] FindNextFileA (in: hFindFile=0x129de00, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0043.545] AreFileApisANSI () returned 1 [0043.546] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.546] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.546] GetFileType (hFile=0xbc) returned 0x1 [0043.546] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.547] CloseHandle (hObject=0xbc) returned 1 [0043.560] AreFileApisANSI () returned 1 [0043.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.560] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.598] GetFileType (hFile=0xbc) returned 0x1 [0043.598] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.599] CloseHandle (hObject=0xbc) returned 1 [0043.599] AreFileApisANSI () returned 1 [0043.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.599] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfb900, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0043.615] GetFileType (hFile=0xbc) returned 0x1 [0043.615] WriteFile (in: hFile=0xbc, lpBuffer=0xdfa5ac*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfa5a4, lpOverlapped=0x0 | out: lpBuffer=0xdfa5ac*, lpNumberOfBytesWritten=0xdfa5a4*=0x423, lpOverlapped=0x0) returned 1 [0043.616] CloseHandle (hObject=0xbc) returned 1 [0043.616] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0x129dd00 [0043.616] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.616] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.616] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.616] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.616] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 1 [0043.616] FindNextFileA (in: hFindFile=0x129dd00, lpFindFileData=0xdfbc2c | out: lpFindFileData=0xdfbc2c) returned 0 [0043.616] FindClose (in: hFindFile=0x129dd00 | out: hFindFile=0x129dd00) returned 1 [0043.617] AreFileApisANSI () returned 1 [0043.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.620] GetFileType (hFile=0xbc) returned 0x1 [0043.622] CloseHandle (hObject=0xbc) returned 1 [0043.622] AreFileApisANSI () returned 1 [0043.622] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.625] GetFileType (hFile=0xbc) returned 0x1 [0043.626] CloseHandle (hObject=0xbc) returned 1 [0043.626] AreFileApisANSI () returned 1 [0043.626] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.630] GetFileType (hFile=0xbc) returned 0x1 [0043.631] CloseHandle (hObject=0xbc) returned 1 [0043.631] AreFileApisANSI () returned 1 [0043.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.635] CloseHandle (hObject=0xbc) returned 1 [0043.635] AreFileApisANSI () returned 1 [0043.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.636] CloseHandle (hObject=0xbc) returned 1 [0043.637] AreFileApisANSI () returned 1 [0043.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.648] CloseHandle (hObject=0xbc) returned 1 [0043.649] AreFileApisANSI () returned 1 [0043.649] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f2d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0043.650] CloseHandle (hObject=0xbc) returned 1 [0043.650] AreFileApisANSI () returned 1 [0043.650] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128fa58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0043.668] CloseHandle (hObject=0xbc) returned 1 [0043.668] AreFileApisANSI () returned 1 [0043.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f6d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0043.669] CloseHandle (hObject=0xbc) returned 1 [0043.669] AreFileApisANSI () returned 1 [0043.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.670] CloseHandle (hObject=0xbc) returned 1 [0043.671] AreFileApisANSI () returned 1 [0043.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.712] CloseHandle (hObject=0xbc) returned 1 [0043.712] AreFileApisANSI () returned 1 [0043.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.729] CloseHandle (hObject=0xbc) returned 1 [0043.729] AreFileApisANSI () returned 1 [0043.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.731] CloseHandle (hObject=0xbc) returned 1 [0043.731] AreFileApisANSI () returned 1 [0043.731] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.732] CloseHandle (hObject=0xbc) returned 1 [0043.733] AreFileApisANSI () returned 1 [0043.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.759] CloseHandle (hObject=0xbc) returned 1 [0043.760] AreFileApisANSI () returned 1 [0043.760] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.762] CloseHandle (hObject=0xbc) returned 1 [0043.762] AreFileApisANSI () returned 1 [0043.762] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.764] CloseHandle (hObject=0xbc) returned 1 [0043.764] AreFileApisANSI () returned 1 [0043.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.810] CloseHandle (hObject=0xbc) returned 1 [0043.810] AreFileApisANSI () returned 1 [0043.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.812] CloseHandle (hObject=0xbc) returned 1 [0043.813] AreFileApisANSI () returned 1 [0043.813] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.814] CloseHandle (hObject=0xbc) returned 1 [0043.814] AreFileApisANSI () returned 1 [0043.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.825] CloseHandle (hObject=0xbc) returned 1 [0043.826] AreFileApisANSI () returned 1 [0043.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.829] CloseHandle (hObject=0xbc) returned 1 [0043.829] AreFileApisANSI () returned 1 [0043.829] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.830] CloseHandle (hObject=0xbc) returned 1 [0043.830] AreFileApisANSI () returned 1 [0043.830] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.834] CloseHandle (hObject=0xbc) returned 1 [0043.835] AreFileApisANSI () returned 1 [0043.835] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.836] CloseHandle (hObject=0xbc) returned 1 [0043.836] AreFileApisANSI () returned 1 [0043.836] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.840] CloseHandle (hObject=0xbc) returned 1 [0043.840] AreFileApisANSI () returned 1 [0043.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.846] CloseHandle (hObject=0xbc) returned 1 [0043.847] AreFileApisANSI () returned 1 [0043.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.849] CloseHandle (hObject=0xbc) returned 1 [0043.850] AreFileApisANSI () returned 1 [0043.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.851] CloseHandle (hObject=0xbc) returned 1 [0043.851] AreFileApisANSI () returned 1 [0043.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.856] CloseHandle (hObject=0xbc) returned 1 [0043.856] AreFileApisANSI () returned 1 [0043.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.857] CloseHandle (hObject=0xbc) returned 1 [0043.860] AreFileApisANSI () returned 1 [0043.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.862] CloseHandle (hObject=0xbc) returned 1 [0043.862] AreFileApisANSI () returned 1 [0043.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.865] CloseHandle (hObject=0xbc) returned 1 [0043.866] AreFileApisANSI () returned 1 [0043.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.867] CloseHandle (hObject=0xbc) returned 1 [0043.867] AreFileApisANSI () returned 1 [0043.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.869] CloseHandle (hObject=0xbc) returned 1 [0043.869] AreFileApisANSI () returned 1 [0043.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.917] CloseHandle (hObject=0xbc) returned 1 [0043.917] AreFileApisANSI () returned 1 [0043.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.919] CloseHandle (hObject=0xbc) returned 1 [0043.919] AreFileApisANSI () returned 1 [0043.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.920] CloseHandle (hObject=0xbc) returned 1 [0043.920] AreFileApisANSI () returned 1 [0043.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.971] CloseHandle (hObject=0xbc) returned 1 [0043.972] AreFileApisANSI () returned 1 [0043.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0043.979] CloseHandle (hObject=0xbc) returned 1 [0043.979] AreFileApisANSI () returned 1 [0043.979] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0043.985] CloseHandle (hObject=0xbc) returned 1 [0043.985] AreFileApisANSI () returned 1 [0043.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0044.000] CloseHandle (hObject=0xbc) returned 1 [0044.001] AreFileApisANSI () returned 1 [0044.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0044.002] CloseHandle (hObject=0xbc) returned 1 [0044.002] AreFileApisANSI () returned 1 [0044.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0044.006] CloseHandle (hObject=0xbc) returned 1 [0044.006] AreFileApisANSI () returned 1 [0044.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0044.008] CloseHandle (hObject=0xbc) returned 1 [0044.008] AreFileApisANSI () returned 1 [0044.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0044.009] CloseHandle (hObject=0xbc) returned 1 [0044.010] AreFileApisANSI () returned 1 [0044.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0044.015] CloseHandle (hObject=0xbc) returned 1 [0044.016] AreFileApisANSI () returned 1 [0044.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0044.017] CloseHandle (hObject=0xbc) returned 1 [0044.017] AreFileApisANSI () returned 1 [0044.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0044.020] CloseHandle (hObject=0xbc) returned 1 [0044.020] AreFileApisANSI () returned 1 [0044.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0044.021] CloseHandle (hObject=0xbc) returned 1 [0044.021] AreFileApisANSI () returned 1 [0044.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0044.082] CloseHandle (hObject=0xbc) returned 1 [0044.082] AreFileApisANSI () returned 1 [0044.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0044.089] CloseHandle (hObject=0xbc) returned 1 [0044.089] AreFileApisANSI () returned 1 [0044.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0044.090] CloseHandle (hObject=0xbc) returned 1 [0044.090] AreFileApisANSI () returned 1 [0044.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0044.102] CloseHandle (hObject=0xbc) returned 1 [0044.103] AreFileApisANSI () returned 1 [0044.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0044.105] CloseHandle (hObject=0xbc) returned 1 [0044.105] AreFileApisANSI () returned 1 [0044.105] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0044.106] CloseHandle (hObject=0xbc) returned 1 [0044.106] AreFileApisANSI () returned 1 [0044.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0044.123] CloseHandle (hObject=0xbc) returned 1 [0044.123] AreFileApisANSI () returned 1 [0044.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0044.124] CloseHandle (hObject=0xbc) returned 1 [0044.124] AreFileApisANSI () returned 1 [0044.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0044.126] CloseHandle (hObject=0xbc) returned 1 [0044.126] AreFileApisANSI () returned 1 [0044.126] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0044.134] CloseHandle (hObject=0xbc) returned 1 [0044.134] AreFileApisANSI () returned 1 [0044.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0044.135] CloseHandle (hObject=0xbc) returned 1 [0044.136] AreFileApisANSI () returned 1 [0044.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0044.140] CloseHandle (hObject=0xbc) returned 1 [0044.140] AreFileApisANSI () returned 1 [0044.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0044.165] CloseHandle (hObject=0xbc) returned 1 [0044.166] AreFileApisANSI () returned 1 [0044.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0044.177] CloseHandle (hObject=0xbc) returned 1 [0044.177] AreFileApisANSI () returned 1 [0044.177] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0044.179] CloseHandle (hObject=0xbc) returned 1 [0044.179] AreFileApisANSI () returned 1 [0044.179] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0044.193] CloseHandle (hObject=0xbc) returned 1 [0044.194] AreFileApisANSI () returned 1 [0044.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0044.195] CloseHandle (hObject=0xbc) returned 1 [0044.196] AreFileApisANSI () returned 1 [0044.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0044.197] CloseHandle (hObject=0xbc) returned 1 [0044.197] AreFileApisANSI () returned 1 [0044.197] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0044.232] CloseHandle (hObject=0xbc) returned 1 [0044.233] AreFileApisANSI () returned 1 [0044.233] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0044.234] CloseHandle (hObject=0xb8) returned 1 [0044.234] AreFileApisANSI () returned 1 [0044.234] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0044.235] CloseHandle (hObject=0xb8) returned 1 [0044.236] AreFileApisANSI () returned 1 [0044.236] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0044.292] CloseHandle (hObject=0xb8) returned 1 [0044.292] AreFileApisANSI () returned 1 [0044.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0044.293] CloseHandle (hObject=0xbc) returned 1 [0044.293] AreFileApisANSI () returned 1 [0044.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0044.294] CloseHandle (hObject=0xbc) returned 1 [0044.295] AreFileApisANSI () returned 1 [0044.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0044.325] CloseHandle (hObject=0xbc) returned 1 [0044.325] AreFileApisANSI () returned 1 [0044.325] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0044.327] CloseHandle (hObject=0xb8) returned 1 [0044.327] AreFileApisANSI () returned 1 [0044.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0044.500] CloseHandle (hObject=0xb8) returned 1 [0044.501] AreFileApisANSI () returned 1 [0044.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0044.502] CloseHandle (hObject=0xb8) returned 1 [0044.502] AreFileApisANSI () returned 1 [0044.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x129a6e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0044.506] GetFileType (hFile=0xbc) returned 0x1 [0044.507] CloseHandle (hObject=0xbc) returned 1 [0044.507] AreFileApisANSI () returned 1 [0044.507] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x129a6e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0044.508] CloseHandle (hObject=0xbc) returned 1 [0044.508] AreFileApisANSI () returned 1 [0044.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12afff8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0044.509] CloseHandle (hObject=0xbc) returned 1 [0044.509] AreFileApisANSI () returned 1 [0044.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12afff8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0044.510] CloseHandle (hObject=0xb8) returned 1 [0044.510] AreFileApisANSI () returned 1 [0044.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12afff8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0044.511] CloseHandle (hObject=0xb8) returned 1 [0044.511] AreFileApisANSI () returned 1 [0044.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12afff8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0044.517] GetFileType (hFile=0xb8) returned 0x1 [0044.518] CloseHandle (hObject=0xb8) returned 1 [0044.518] AreFileApisANSI () returned 1 [0044.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0044.519] CloseHandle (hObject=0xb8) returned 1 [0044.519] AreFileApisANSI () returned 1 [0044.519] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0044.522] CloseHandle (hObject=0xb8) returned 1 [0044.523] AreFileApisANSI () returned 1 [0044.523] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0044.523] CloseHandle (hObject=0xb8) returned 1 [0044.524] AreFileApisANSI () returned 1 [0044.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0044.527] GetFileType (hFile=0xb8) returned 0x1 [0044.528] CloseHandle (hObject=0xb8) returned 1 [0044.528] AreFileApisANSI () returned 1 [0044.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0044.529] CloseHandle (hObject=0xb8) returned 1 [0044.530] AreFileApisANSI () returned 1 [0044.530] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0044.531] CloseHandle (hObject=0xb8) returned 1 [0044.532] AreFileApisANSI () returned 1 [0044.532] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0044.669] AreFileApisANSI () returned 1 [0044.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0044.669] AreFileApisANSI () returned 1 [0044.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0044.670] AreFileApisANSI () returned 1 [0044.670] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0044.690] AreFileApisANSI () returned 1 [0044.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0044.695] AreFileApisANSI () returned 1 [0044.695] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0044.712] AreFileApisANSI () returned 1 [0044.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0044.723] AreFileApisANSI () returned 1 [0044.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0044.724] AreFileApisANSI () returned 1 [0044.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0044.724] AreFileApisANSI () returned 1 [0044.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0044.726] AreFileApisANSI () returned 1 [0044.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0044.728] AreFileApisANSI () returned 1 [0044.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0044.729] AreFileApisANSI () returned 1 [0044.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0044.729] AreFileApisANSI () returned 1 [0044.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0044.732] AreFileApisANSI () returned 1 [0044.732] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0044.734] AreFileApisANSI () returned 1 [0044.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0044.734] AreFileApisANSI () returned 1 [0044.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0044.734] AreFileApisANSI () returned 1 [0044.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0044.740] AreFileApisANSI () returned 1 [0044.740] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0044.742] AreFileApisANSI () returned 1 [0044.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0044.742] AreFileApisANSI () returned 1 [0044.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0044.742] AreFileApisANSI () returned 1 [0044.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0044.757] AreFileApisANSI () returned 1 [0044.757] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0044.758] AreFileApisANSI () returned 1 [0044.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0044.758] AreFileApisANSI () returned 1 [0044.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0044.763] AreFileApisANSI () returned 1 [0044.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0044.772] CloseHandle (hObject=0xb8) returned 1 [0044.772] AreFileApisANSI () returned 1 [0044.772] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0044.774] CloseHandle (hObject=0xb8) returned 1 [0044.774] AreFileApisANSI () returned 1 [0044.774] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0044.777] CloseHandle (hObject=0xb8) returned 1 [0044.778] AreFileApisANSI () returned 1 [0044.778] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0044.779] CloseHandle (hObject=0xbc) returned 1 [0044.779] AreFileApisANSI () returned 1 [0044.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0044.781] CloseHandle (hObject=0xbc) returned 1 [0044.781] AreFileApisANSI () returned 1 [0044.781] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0044.803] CloseHandle (hObject=0xbc) returned 1 [0044.803] AreFileApisANSI () returned 1 [0044.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0044.805] CloseHandle (hObject=0xb8) returned 1 [0044.805] AreFileApisANSI () returned 1 [0044.805] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0044.807] CloseHandle (hObject=0xb8) returned 1 [0044.807] AreFileApisANSI () returned 1 [0044.807] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0044.976] CloseHandle (hObject=0xb8) returned 1 [0044.976] AreFileApisANSI () returned 1 [0044.976] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0044.977] CloseHandle (hObject=0xbc) returned 1 [0044.977] AreFileApisANSI () returned 1 [0044.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0044.979] CloseHandle (hObject=0xbc) returned 1 [0044.980] AreFileApisANSI () returned 1 [0044.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0045.005] CloseHandle (hObject=0xbc) returned 1 [0045.005] AreFileApisANSI () returned 1 [0045.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0045.008] CloseHandle (hObject=0xb8) returned 1 [0045.009] AreFileApisANSI () returned 1 [0045.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0045.010] CloseHandle (hObject=0xb8) returned 1 [0045.011] AreFileApisANSI () returned 1 [0045.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0045.050] CloseHandle (hObject=0xb8) returned 1 [0045.050] AreFileApisANSI () returned 1 [0045.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0045.052] CloseHandle (hObject=0xb8) returned 1 [0045.052] AreFileApisANSI () returned 1 [0045.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0045.053] CloseHandle (hObject=0xb8) returned 1 [0045.054] AreFileApisANSI () returned 1 [0045.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0045.111] CloseHandle (hObject=0xb8) returned 1 [0045.111] AreFileApisANSI () returned 1 [0045.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0045.130] CloseHandle (hObject=0xb8) returned 1 [0045.131] AreFileApisANSI () returned 1 [0045.131] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0045.148] CloseHandle (hObject=0xb8) returned 1 [0045.148] AreFileApisANSI () returned 1 [0045.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0045.150] CloseHandle (hObject=0xb8) returned 1 [0045.150] AreFileApisANSI () returned 1 [0045.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0045.177] GetFileType (hFile=0xbc) returned 0x1 [0045.178] CloseHandle (hObject=0xbc) returned 1 [0045.178] AreFileApisANSI () returned 1 [0045.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0045.180] CloseHandle (hObject=0xbc) returned 1 [0045.180] AreFileApisANSI () returned 1 [0045.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0045.181] CloseHandle (hObject=0xbc) returned 1 [0045.182] AreFileApisANSI () returned 1 [0045.182] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0045.242] CloseHandle (hObject=0xc0) returned 1 [0045.242] AreFileApisANSI () returned 1 [0045.242] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0045.244] CloseHandle (hObject=0xc0) returned 1 [0045.244] AreFileApisANSI () returned 1 [0045.244] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0045.245] CloseHandle (hObject=0xc0) returned 1 [0045.246] AreFileApisANSI () returned 1 [0045.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0045.247] CloseHandle (hObject=0xb4) returned 1 [0045.247] AreFileApisANSI () returned 1 [0045.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0045.249] CloseHandle (hObject=0xb4) returned 1 [0045.249] AreFileApisANSI () returned 1 [0045.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0045.289] CloseHandle (hObject=0xb4) returned 1 [0045.290] AreFileApisANSI () returned 1 [0045.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfd42c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0045.290] AreFileApisANSI () returned 1 [0045.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0045.291] CloseHandle (hObject=0xb4) returned 1 [0045.292] AreFileApisANSI () returned 1 [0045.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0045.293] CloseHandle (hObject=0xb4) returned 1 [0045.293] AreFileApisANSI () returned 1 [0045.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0045.294] CloseHandle (hObject=0xb4) returned 1 [0045.294] AreFileApisANSI () returned 1 [0045.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0045.332] GetFileType (hFile=0xb8) returned 0x1 [0045.333] CloseHandle (hObject=0xb8) returned 1 [0045.333] AreFileApisANSI () returned 1 [0045.333] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0045.336] CloseHandle (hObject=0xb8) returned 1 [0045.337] AreFileApisANSI () returned 1 [0045.337] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0045.338] CloseHandle (hObject=0xb8) returned 1 [0045.339] AreFileApisANSI () returned 1 [0045.339] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0045.340] CloseHandle (hObject=0xbc) returned 1 [0045.340] AreFileApisANSI () returned 1 [0045.340] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0045.342] CloseHandle (hObject=0xbc) returned 1 [0045.342] AreFileApisANSI () returned 1 [0045.342] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0045.417] CloseHandle (hObject=0xbc) returned 1 [0045.418] AreFileApisANSI () returned 1 [0045.418] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0045.419] CloseHandle (hObject=0xb8) returned 1 [0045.419] AreFileApisANSI () returned 1 [0045.419] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0045.421] CloseHandle (hObject=0xb8) returned 1 [0045.421] AreFileApisANSI () returned 1 [0045.421] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0045.482] CloseHandle (hObject=0xb8) returned 1 [0045.483] AreFileApisANSI () returned 1 [0045.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0045.486] GetFileType (hFile=0xb8) returned 0x1 [0045.487] CloseHandle (hObject=0xb8) returned 1 [0045.487] AreFileApisANSI () returned 1 [0045.487] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0045.490] CloseHandle (hObject=0xb8) returned 1 [0045.490] AreFileApisANSI () returned 1 [0045.490] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0045.492] CloseHandle (hObject=0xb8) returned 1 [0045.492] AreFileApisANSI () returned 1 [0045.492] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0045.553] CloseHandle (hObject=0xbc) returned 1 [0045.553] AreFileApisANSI () returned 1 [0045.553] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0045.555] CloseHandle (hObject=0xbc) returned 1 [0045.555] AreFileApisANSI () returned 1 [0045.555] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0045.559] CloseHandle (hObject=0xbc) returned 1 [0045.559] AreFileApisANSI () returned 1 [0045.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0045.560] CloseHandle (hObject=0xb8) returned 1 [0045.561] AreFileApisANSI () returned 1 [0045.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0045.561] GetFileType (hFile=0xb8) returned 0x1 [0045.562] CloseHandle (hObject=0xb8) returned 1 [0045.562] AreFileApisANSI () returned 1 [0045.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0045.563] CloseHandle (hObject=0xb8) returned 1 [0045.564] AreFileApisANSI () returned 1 [0045.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0045.626] CloseHandle (hObject=0xbc) returned 1 [0045.627] AreFileApisANSI () returned 1 [0045.627] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0045.628] CloseHandle (hObject=0xbc) returned 1 [0045.628] AreFileApisANSI () returned 1 [0045.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0045.629] CloseHandle (hObject=0xbc) returned 1 [0045.629] AreFileApisANSI () returned 1 [0045.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0045.630] CloseHandle (hObject=0xb0) returned 1 [0045.630] AreFileApisANSI () returned 1 [0045.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0045.631] GetFileType (hFile=0xb0) returned 0x1 [0045.631] CloseHandle (hObject=0xb0) returned 1 [0045.631] AreFileApisANSI () returned 1 [0045.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0045.632] CloseHandle (hObject=0xb0) returned 1 [0045.633] AreFileApisANSI () returned 1 [0045.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0045.635] CloseHandle (hObject=0xb4) returned 1 [0045.635] AreFileApisANSI () returned 1 [0045.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0045.673] CloseHandle (hObject=0xb4) returned 1 [0045.673] AreFileApisANSI () returned 1 [0045.673] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0045.674] CloseHandle (hObject=0xb4) returned 1 [0045.674] AreFileApisANSI () returned 1 [0045.674] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0045.675] CloseHandle (hObject=0xb4) returned 1 [0045.676] AreFileApisANSI () returned 1 [0045.676] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0045.676] CloseHandle (hObject=0xb4) returned 1 [0045.677] AreFileApisANSI () returned 1 [0045.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0045.724] CloseHandle (hObject=0xb4) returned 1 [0045.724] AreFileApisANSI () returned 1 [0045.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0045.725] CloseHandle (hObject=0xb4) returned 1 [0045.726] AreFileApisANSI () returned 1 [0045.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0045.726] CloseHandle (hObject=0xb4) returned 1 [0045.727] AreFileApisANSI () returned 1 [0045.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0045.777] CloseHandle (hObject=0xb4) returned 1 [0045.777] AreFileApisANSI () returned 1 [0045.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0045.780] CloseHandle (hObject=0xb0) returned 1 [0045.780] AreFileApisANSI () returned 1 [0045.780] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290c88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0045.782] GetFileType (hFile=0xb0) returned 0x1 [0045.783] CloseHandle (hObject=0xb0) returned 1 [0045.783] AreFileApisANSI () returned 1 [0045.783] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1290ac8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0045.784] CloseHandle (hObject=0xb0) returned 1 [0045.784] AreFileApisANSI () returned 1 [0045.784] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0045.785] CloseHandle (hObject=0xb4) returned 1 [0045.785] AreFileApisANSI () returned 1 [0045.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0045.788] CloseHandle (hObject=0xb4) returned 1 [0045.788] AreFileApisANSI () returned 1 [0045.788] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0045.789] CloseHandle (hObject=0xb4) returned 1 [0045.789] AreFileApisANSI () returned 1 [0045.789] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0045.792] CloseHandle (hObject=0xb8) returned 1 [0045.792] AreFileApisANSI () returned 1 [0045.792] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0045.793] GetFileType (hFile=0xb8) returned 0x1 [0045.794] CloseHandle (hObject=0xb8) returned 1 [0045.794] AreFileApisANSI () returned 1 [0045.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0045.796] CloseHandle (hObject=0xb8) returned 1 [0045.797] AreFileApisANSI () returned 1 [0045.797] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0045.902] CloseHandle (hObject=0xbc) returned 1 [0045.902] AreFileApisANSI () returned 1 [0045.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0045.903] CloseHandle (hObject=0xbc) returned 1 [0045.903] AreFileApisANSI () returned 1 [0045.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0045.904] CloseHandle (hObject=0xbc) returned 1 [0045.908] AreFileApisANSI () returned 1 [0045.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0045.911] CloseHandle (hObject=0xbc) returned 1 [0045.911] AreFileApisANSI () returned 1 [0045.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0046.109] CloseHandle (hObject=0xbc) returned 1 [0046.110] AreFileApisANSI () returned 1 [0046.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0046.111] CloseHandle (hObject=0xbc) returned 1 [0046.111] AreFileApisANSI () returned 1 [0046.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0046.115] CloseHandle (hObject=0xbc) returned 1 [0046.115] AreFileApisANSI () returned 1 [0046.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0046.135] CloseHandle (hObject=0xbc) returned 1 [0046.136] AreFileApisANSI () returned 1 [0046.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0046.137] CloseHandle (hObject=0xbc) returned 1 [0046.137] AreFileApisANSI () returned 1 [0046.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0046.159] CloseHandle (hObject=0xc0) returned 1 [0046.159] AreFileApisANSI () returned 1 [0046.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0046.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0046.160] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\server\\xusage.txt"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\Xusage.txt.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\server\\xusage.txt.cryptoid"), dwFlags=0x2) returned 1 [0046.161] AreFileApisANSI () returned 1 [0046.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0046.166] CloseHandle (hObject=0xb8) returned 1 [0046.166] AreFileApisANSI () returned 1 [0046.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0046.168] CloseHandle (hObject=0xb8) returned 1 [0046.169] AreFileApisANSI () returned 1 [0046.169] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0046.170] CloseHandle (hObject=0xb8) returned 1 [0046.172] AreFileApisANSI () returned 1 [0046.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0046.173] CloseHandle (hObject=0xbc) returned 1 [0046.173] AreFileApisANSI () returned 1 [0046.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0046.174] CloseHandle (hObject=0xbc) returned 1 [0046.175] AreFileApisANSI () returned 1 [0046.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0046.196] CloseHandle (hObject=0xbc) returned 1 [0046.196] AreFileApisANSI () returned 1 [0046.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0046.199] CloseHandle (hObject=0xbc) returned 1 [0046.200] AreFileApisANSI () returned 1 [0046.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0046.203] CloseHandle (hObject=0xbc) returned 1 [0046.203] AreFileApisANSI () returned 1 [0046.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0046.208] CloseHandle (hObject=0xbc) returned 1 [0046.208] AreFileApisANSI () returned 1 [0046.209] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0046.933] CloseHandle (hObject=0xbc) returned 1 [0046.934] AreFileApisANSI () returned 1 [0046.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0046.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0046.934] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\charsets.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\charsets.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\charsets.jar.cryptoid"), dwFlags=0x2) returned 1 [0046.938] AreFileApisANSI () returned 1 [0046.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0046.948] CloseHandle (hObject=0xbc) returned 1 [0046.948] AreFileApisANSI () returned 1 [0046.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0046.950] CloseHandle (hObject=0xbc) returned 1 [0046.950] AreFileApisANSI () returned 1 [0046.950] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0046.951] CloseHandle (hObject=0xbc) returned 1 [0046.952] AreFileApisANSI () returned 1 [0046.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0046.969] CloseHandle (hObject=0xbc) returned 1 [0046.969] AreFileApisANSI () returned 1 [0046.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0046.970] CloseHandle (hObject=0xbc) returned 1 [0046.970] AreFileApisANSI () returned 1 [0046.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0046.971] CloseHandle (hObject=0xbc) returned 1 [0046.972] AreFileApisANSI () returned 1 [0046.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0047.033] CloseHandle (hObject=0xc0) returned 1 [0047.033] AreFileApisANSI () returned 1 [0047.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0047.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0047.033] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\ffjcext.zip"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\ffjcext.zip.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\ffjcext.zip.cryptoid"), dwFlags=0x2) returned 1 [0047.034] AreFileApisANSI () returned 1 [0047.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0047.053] CloseHandle (hObject=0xc0) returned 1 [0047.053] AreFileApisANSI () returned 1 [0047.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0047.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0047.053] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash.gif"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash.gif.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash.gif.cryptoid"), dwFlags=0x2) returned 1 [0047.054] AreFileApisANSI () returned 1 [0047.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0047.096] CloseHandle (hObject=0xc0) returned 1 [0047.096] AreFileApisANSI () returned 1 [0047.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0047.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0047.097] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash@2x.gif"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash@2x.gif.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash@2x.gif.cryptoid"), dwFlags=0x2) returned 1 [0047.097] AreFileApisANSI () returned 1 [0047.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0047.114] CloseHandle (hObject=0xc0) returned 1 [0047.114] AreFileApisANSI () returned 1 [0047.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0047.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0047.115] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash_11-lic.gif"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11-lic.gif.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash_11-lic.gif.cryptoid"), dwFlags=0x2) returned 1 [0047.115] AreFileApisANSI () returned 1 [0047.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0047.144] CloseHandle (hObject=0xc0) returned 1 [0047.144] AreFileApisANSI () returned 1 [0047.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0047.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0047.145] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash_11@2x-lic.gif"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11@2x-lic.gif.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash_11@2x-lic.gif.cryptoid"), dwFlags=0x2) returned 1 [0047.148] AreFileApisANSI () returned 1 [0047.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0047.982] CloseHandle (hObject=0xbc) returned 1 [0047.982] AreFileApisANSI () returned 1 [0047.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0047.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0047.982] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy.jar.cryptoid"), dwFlags=0x2) returned 1 [0047.983] AreFileApisANSI () returned 1 [0047.983] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0047.987] CloseHandle (hObject=0xbc) returned 1 [0047.988] AreFileApisANSI () returned 1 [0047.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0047.989] CloseHandle (hObject=0xbc) returned 1 [0047.989] AreFileApisANSI () returned 1 [0047.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0047.990] CloseHandle (hObject=0xbc) returned 1 [0047.991] AreFileApisANSI () returned 1 [0047.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0048.437] CloseHandle (hObject=0xc0) returned 1 [0048.437] AreFileApisANSI () returned 1 [0048.437] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0048.438] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0048.438] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\access-bridge-64.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\access-bridge-64.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\access-bridge-64.jar.cryptoid"), dwFlags=0x2) returned 1 [0048.438] AreFileApisANSI () returned 1 [0048.438] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0049.660] CloseHandle (hObject=0xc0) returned 1 [0049.660] AreFileApisANSI () returned 1 [0049.660] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0049.660] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0049.660] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\cldrdata.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\cldrdata.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\cldrdata.jar.cryptoid"), dwFlags=0x2) returned 1 [0049.671] AreFileApisANSI () returned 1 [0049.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0049.698] CloseHandle (hObject=0xc0) returned 1 [0049.698] AreFileApisANSI () returned 1 [0049.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0049.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0049.698] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\dnsns.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\dnsns.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\dnsns.jar.cryptoid"), dwFlags=0x2) returned 1 [0049.699] AreFileApisANSI () returned 1 [0049.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0049.749] CloseHandle (hObject=0xc0) returned 1 [0049.750] AreFileApisANSI () returned 1 [0049.750] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0049.750] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0049.750] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\jaccess.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jaccess.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\jaccess.jar.cryptoid"), dwFlags=0x2) returned 1 [0049.750] AreFileApisANSI () returned 1 [0049.751] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0050.630] CloseHandle (hObject=0xc0) returned 1 [0050.630] AreFileApisANSI () returned 1 [0050.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0050.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0050.630] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\jfxrt.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jfxrt.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\jfxrt.jar.cryptoid"), dwFlags=0x2) returned 1 [0050.631] AreFileApisANSI () returned 1 [0050.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0051.990] CloseHandle (hObject=0xc0) returned 1 [0051.991] AreFileApisANSI () returned 1 [0051.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0051.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0051.991] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\localedata.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\localedata.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\localedata.jar.cryptoid"), dwFlags=0x2) returned 1 [0051.992] AreFileApisANSI () returned 1 [0051.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0053.400] CloseHandle (hObject=0xc0) returned 1 [0053.400] AreFileApisANSI () returned 1 [0053.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0053.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0053.400] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\nashorn.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\nashorn.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\nashorn.jar.cryptoid"), dwFlags=0x2) returned 1 [0053.401] AreFileApisANSI () returned 1 [0053.401] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0053.468] CloseHandle (hObject=0xc0) returned 1 [0053.468] AreFileApisANSI () returned 1 [0053.468] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0053.468] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0053.468] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunec.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunec.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunec.jar.cryptoid"), dwFlags=0x2) returned 1 [0053.469] AreFileApisANSI () returned 1 [0053.469] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0053.892] CloseHandle (hObject=0xc0) returned 1 [0053.892] AreFileApisANSI () returned 1 [0053.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0053.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0053.892] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunjce_provider.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunjce_provider.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunjce_provider.jar.cryptoid"), dwFlags=0x2) returned 1 [0053.893] AreFileApisANSI () returned 1 [0053.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0053.953] CloseHandle (hObject=0xc0) returned 1 [0053.954] AreFileApisANSI () returned 1 [0053.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0053.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0053.954] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunmscapi.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunmscapi.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunmscapi.jar.cryptoid"), dwFlags=0x2) returned 1 [0053.954] AreFileApisANSI () returned 1 [0053.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0054.545] CloseHandle (hObject=0xc0) returned 1 [0054.546] AreFileApisANSI () returned 1 [0054.546] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0054.546] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0054.546] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunpkcs11.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunpkcs11.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunpkcs11.jar.cryptoid"), dwFlags=0x2) returned 1 [0054.547] AreFileApisANSI () returned 1 [0054.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0054.645] CloseHandle (hObject=0xc0) returned 1 [0054.645] AreFileApisANSI () returned 1 [0054.645] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0054.645] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0054.645] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\zipfs.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\zipfs.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\zipfs.jar.cryptoid"), dwFlags=0x2) returned 1 [0054.646] AreFileApisANSI () returned 1 [0054.646] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0054.654] CloseHandle (hObject=0xbc) returned 1 [0054.655] AreFileApisANSI () returned 1 [0054.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0054.656] CloseHandle (hObject=0xbc) returned 1 [0054.656] AreFileApisANSI () returned 1 [0054.656] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0054.658] CloseHandle (hObject=0xbc) returned 1 [0054.659] AreFileApisANSI () returned 1 [0054.659] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0054.663] CloseHandle (hObject=0xbc) returned 1 [0054.663] AreFileApisANSI () returned 1 [0054.663] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0054.664] CloseHandle (hObject=0xbc) returned 1 [0054.664] AreFileApisANSI () returned 1 [0054.664] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0054.669] CloseHandle (hObject=0xbc) returned 1 [0054.670] AreFileApisANSI () returned 1 [0054.670] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0054.677] CloseHandle (hObject=0xc0) returned 1 [0054.677] AreFileApisANSI () returned 1 [0054.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0054.678] CloseHandle (hObject=0xc0) returned 1 [0054.678] AreFileApisANSI () returned 1 [0054.678] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0054.679] CloseHandle (hObject=0xc0) returned 1 [0054.680] AreFileApisANSI () returned 1 [0054.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfb80c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0054.681] CloseHandle (hObject=0xc4) returned 1 [0054.681] AreFileApisANSI () returned 1 [0054.681] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfb80c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0054.681] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0054.681] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\invalid32x32.gif"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\invalid32x32.gif.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\invalid32x32.gif.cryptoid"), dwFlags=0x2) returned 1 [0054.682] AreFileApisANSI () returned 1 [0054.682] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfb80c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0054.683] CloseHandle (hObject=0xc4) returned 1 [0054.683] AreFileApisANSI () returned 1 [0054.683] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfb80c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0054.683] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0054.683] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_copydrop32x32.gif"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_copydrop32x32.gif.cryptoid"), dwFlags=0x2) returned 1 [0054.684] AreFileApisANSI () returned 1 [0054.684] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfb80c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0054.693] CloseHandle (hObject=0xc4) returned 1 [0054.693] AreFileApisANSI () returned 1 [0054.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfb80c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0054.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0054.693] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_copynodrop32x32.gif.cryptoid"), dwFlags=0x2) returned 1 [0054.694] AreFileApisANSI () returned 1 [0054.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfb80c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0054.695] CloseHandle (hObject=0xc4) returned 1 [0054.695] AreFileApisANSI () returned 1 [0054.695] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfb80c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0054.695] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0054.695] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_linkdrop32x32.gif.cryptoid"), dwFlags=0x2) returned 1 [0054.695] AreFileApisANSI () returned 1 [0054.695] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfb80c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0054.697] CloseHandle (hObject=0xc4) returned 1 [0054.697] AreFileApisANSI () returned 1 [0054.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfb80c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0054.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0054.697] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_linknodrop32x32.gif.cryptoid"), dwFlags=0x2) returned 1 [0054.697] AreFileApisANSI () returned 1 [0054.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfb80c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0054.701] CloseHandle (hObject=0xc4) returned 1 [0054.701] AreFileApisANSI () returned 1 [0054.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfb80c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0054.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0054.701] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_movedrop32x32.gif"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_movedrop32x32.gif.cryptoid"), dwFlags=0x2) returned 1 [0054.703] AreFileApisANSI () returned 1 [0054.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfb80c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0054.718] CloseHandle (hObject=0xc4) returned 1 [0054.719] AreFileApisANSI () returned 1 [0054.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfb80c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0054.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0054.719] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_movenodrop32x32.gif.cryptoid"), dwFlags=0x2) returned 1 [0054.719] AreFileApisANSI () returned 1 [0054.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0055.873] CloseHandle (hObject=0xbc) returned 1 [0055.873] AreFileApisANSI () returned 1 [0055.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0055.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0055.873] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\javaws.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\javaws.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\javaws.jar.cryptoid"), dwFlags=0x2) returned 1 [0055.874] AreFileApisANSI () returned 1 [0055.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0056.049] CloseHandle (hObject=0xbc) returned 1 [0056.049] AreFileApisANSI () returned 1 [0056.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0056.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0056.049] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jce.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\jce.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jce.jar.cryptoid"), dwFlags=0x2) returned 1 [0056.050] AreFileApisANSI () returned 1 [0056.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0056.051] CloseHandle (hObject=0xbc) returned 1 [0056.051] AreFileApisANSI () returned 1 [0056.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0056.052] CloseHandle (hObject=0xbc) returned 1 [0056.052] AreFileApisANSI () returned 1 [0056.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0056.059] CloseHandle (hObject=0xbc) returned 1 [0056.060] AreFileApisANSI () returned 1 [0056.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0057.240] CloseHandle (hObject=0xbc) returned 1 [0057.240] AreFileApisANSI () returned 1 [0057.240] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0057.240] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0057.240] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfr.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfr.jar.cryptoid"), dwFlags=0x2) returned 1 [0057.241] AreFileApisANSI () returned 1 [0057.241] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0057.320] CloseHandle (hObject=0xbc) returned 1 [0057.320] AreFileApisANSI () returned 1 [0057.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0057.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0057.320] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfxswt.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\jfxswt.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfxswt.jar.cryptoid"), dwFlags=0x2) returned 1 [0057.322] AreFileApisANSI () returned 1 [0057.322] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0058.195] CloseHandle (hObject=0xbc) returned 1 [0058.196] AreFileApisANSI () returned 1 [0058.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0058.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0058.196] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jsse.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\jsse.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jsse.jar.cryptoid"), dwFlags=0x2) returned 1 [0058.197] AreFileApisANSI () returned 1 [0058.197] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0058.218] CloseHandle (hObject=0xbc) returned 1 [0058.218] AreFileApisANSI () returned 1 [0058.218] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0058.218] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0058.218] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jvm.hprof.txt"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\jvm.hprof.txt.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jvm.hprof.txt.cryptoid"), dwFlags=0x2) returned 1 [0058.219] AreFileApisANSI () returned 1 [0058.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0058.224] CloseHandle (hObject=0xbc) returned 1 [0058.224] AreFileApisANSI () returned 1 [0058.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0058.225] CloseHandle (hObject=0xbc) returned 1 [0058.225] AreFileApisANSI () returned 1 [0058.225] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0058.227] CloseHandle (hObject=0xbc) returned 1 [0058.227] AreFileApisANSI () returned 1 [0058.227] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0058.229] CloseHandle (hObject=0xbc) returned 1 [0058.230] AreFileApisANSI () returned 1 [0058.230] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0058.230] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0058.230] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management-agent.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\management-agent.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management-agent.jar.cryptoid"), dwFlags=0x2) returned 1 [0058.231] AreFileApisANSI () returned 1 [0058.231] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0059.052] CloseHandle (hObject=0xbc) returned 1 [0059.052] AreFileApisANSI () returned 1 [0059.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0059.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0059.052] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\plugin.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\plugin.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\plugin.jar.cryptoid"), dwFlags=0x2) returned 1 [0059.053] AreFileApisANSI () returned 1 [0059.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0059.854] CloseHandle (hObject=0xbc) returned 1 [0059.855] AreFileApisANSI () returned 1 [0059.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0059.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0059.855] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\resources.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\resources.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\resources.jar.cryptoid"), dwFlags=0x2) returned 1 [0059.856] AreFileApisANSI () returned 1 [0059.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0060.835] CloseHandle (hObject=0xbc) returned 1 [0060.836] AreFileApisANSI () returned 1 [0060.836] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0060.836] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0060.836] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\rt.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\rt.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\rt.jar.cryptoid"), dwFlags=0x2) returned 1 [0060.837] AreFileApisANSI () returned 1 [0060.837] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0060.841] CloseHandle (hObject=0xbc) returned 1 [0060.841] AreFileApisANSI () returned 1 [0060.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0060.843] CloseHandle (hObject=0xbc) returned 1 [0060.843] AreFileApisANSI () returned 1 [0060.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0060.845] CloseHandle (hObject=0xbc) returned 1 [0060.845] AreFileApisANSI () returned 1 [0060.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0060.876] CloseHandle (hObject=0xc0) returned 1 [0060.876] AreFileApisANSI () returned 1 [0060.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0060.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0060.876] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\local_policy.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\local_policy.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\local_policy.jar.cryptoid"), dwFlags=0x2) returned 1 [0060.877] AreFileApisANSI () returned 1 [0060.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0060.892] CloseHandle (hObject=0xc0) returned 1 [0060.892] AreFileApisANSI () returned 1 [0060.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfc16c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0060.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0060.893] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\us_export_policy.jar"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\US_export_policy.jar.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\us_export_policy.jar.cryptoid"), dwFlags=0x2) returned 1 [0060.894] AreFileApisANSI () returned 1 [0060.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0061.086] CloseHandle (hObject=0xbc) returned 1 [0061.086] AreFileApisANSI () returned 1 [0061.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0061.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0061.087] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\tzdb.dat"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\lib\\tzdb.dat.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\tzdb.dat.cryptoid"), dwFlags=0x2) returned 1 [0061.088] AreFileApisANSI () returned 1 [0061.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfd42c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0061.108] CloseHandle (hObject=0xb8) returned 1 [0061.109] AreFileApisANSI () returned 1 [0061.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfd42c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0061.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0061.109] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\readme.txt"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\README.txt.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\readme.txt.cryptoid"), dwFlags=0x2) returned 1 [0061.110] AreFileApisANSI () returned 1 [0061.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfd42c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0061.261] CloseHandle (hObject=0xb8) returned 1 [0061.261] AreFileApisANSI () returned 1 [0061.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfd42c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0061.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0061.261] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\thirdpartylicensereadme-javafx.txt"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME-JAVAFX.txt.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\thirdpartylicensereadme-javafx.txt.cryptoid"), dwFlags=0x2) returned 1 [0061.262] AreFileApisANSI () returned 1 [0061.262] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfd42c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0061.610] CloseHandle (hObject=0xb8) returned 1 [0061.611] AreFileApisANSI () returned 1 [0061.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfd42c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0061.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12922c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0061.611] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\thirdpartylicensereadme.txt"), lpNewFileName="C:\\\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME.txt.cryptoid" (normalized: "c:\\program files\\java\\jre1.8.0_131\\thirdpartylicensereadme.txt.cryptoid"), dwFlags=0x2) returned 1 [0061.612] AreFileApisANSI () returned 1 [0061.612] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0061.613] CloseHandle (hObject=0xb0) returned 1 [0061.613] AreFileApisANSI () returned 1 [0061.614] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0061.615] CloseHandle (hObject=0xb0) returned 1 [0061.615] AreFileApisANSI () returned 1 [0061.615] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0061.617] CloseHandle (hObject=0xb0) returned 1 [0061.617] AreFileApisANSI () returned 1 [0061.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0062.044] CloseHandle (hObject=0xb4) returned 1 [0062.045] AreFileApisANSI () returned 1 [0062.045] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0062.055] CloseHandle (hObject=0xb4) returned 1 [0062.056] AreFileApisANSI () returned 1 [0062.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0062.057] CloseHandle (hObject=0xb4) returned 1 [0062.057] AreFileApisANSI () returned 1 [0062.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0062.137] CloseHandle (hObject=0xb4) returned 1 [0062.165] AreFileApisANSI () returned 1 [0062.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0062.166] CloseHandle (hObject=0xb4) returned 1 [0062.166] AreFileApisANSI () returned 1 [0062.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0062.170] CloseHandle (hObject=0xb4) returned 1 [0062.239] AreFileApisANSI () returned 1 [0062.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0062.241] CloseHandle (hObject=0xb4) returned 1 [0062.241] AreFileApisANSI () returned 1 [0062.241] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0062.243] CloseHandle (hObject=0xb4) returned 1 [0062.246] AreFileApisANSI () returned 1 [0062.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0062.248] CloseHandle (hObject=0xb4) returned 1 [0062.248] AreFileApisANSI () returned 1 [0062.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0062.249] CloseHandle (hObject=0xb8) returned 1 [0062.250] AreFileApisANSI () returned 1 [0062.250] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0062.251] CloseHandle (hObject=0xb8) returned 1 [0062.252] AreFileApisANSI () returned 1 [0062.252] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0062.253] CloseHandle (hObject=0xb8) returned 1 [0062.254] AreFileApisANSI () returned 1 [0062.254] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0062.255] CloseHandle (hObject=0xb8) returned 1 [0062.255] AreFileApisANSI () returned 1 [0062.255] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0062.258] CloseHandle (hObject=0xb8) returned 1 [0062.258] AreFileApisANSI () returned 1 [0062.258] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0062.260] CloseHandle (hObject=0xb8) returned 1 [0062.260] AreFileApisANSI () returned 1 [0062.260] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0062.273] CloseHandle (hObject=0xbc) returned 1 [0062.274] AreFileApisANSI () returned 1 [0062.274] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0062.275] CloseHandle (hObject=0xbc) returned 1 [0062.275] AreFileApisANSI () returned 1 [0062.275] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0062.277] CloseHandle (hObject=0xbc) returned 1 [0062.283] AreFileApisANSI () returned 1 [0062.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0062.286] CloseHandle (hObject=0xbc) returned 1 [0062.286] AreFileApisANSI () returned 1 [0062.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0062.290] CloseHandle (hObject=0xbc) returned 1 [0062.290] AreFileApisANSI () returned 1 [0062.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0062.292] CloseHandle (hObject=0xbc) returned 1 [0062.292] AreFileApisANSI () returned 1 [0062.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f3d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0062.297] CloseHandle (hObject=0xc0) returned 1 [0062.297] AreFileApisANSI () returned 1 [0062.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128ee58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0062.298] CloseHandle (hObject=0xc0) returned 1 [0062.299] AreFileApisANSI () returned 1 [0062.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128eed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0062.300] CloseHandle (hObject=0xc0) returned 1 [0062.301] AreFileApisANSI () returned 1 [0062.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0062.302] CloseHandle (hObject=0xb8) returned 1 [0062.302] AreFileApisANSI () returned 1 [0062.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0062.304] CloseHandle (hObject=0xb8) returned 1 [0062.305] AreFileApisANSI () returned 1 [0062.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0062.308] CloseHandle (hObject=0xb8) returned 1 [0062.308] AreFileApisANSI () returned 1 [0062.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f158, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0062.319] CloseHandle (hObject=0xbc) returned 1 [0062.320] AreFileApisANSI () returned 1 [0062.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128efd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0062.428] CloseHandle (hObject=0xbc) returned 1 [0062.429] AreFileApisANSI () returned 1 [0062.429] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0062.430] CloseHandle (hObject=0xbc) returned 1 [0062.431] AreFileApisANSI () returned 1 [0062.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128fa58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0062.434] CloseHandle (hObject=0xbc) returned 1 [0062.435] AreFileApisANSI () returned 1 [0062.435] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f4d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0062.437] CloseHandle (hObject=0xbc) returned 1 [0062.437] AreFileApisANSI () returned 1 [0062.437] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128fc58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0062.447] CloseHandle (hObject=0xbc) returned 1 [0062.448] AreFileApisANSI () returned 1 [0062.448] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f5d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0062.451] CloseHandle (hObject=0xbc) returned 1 [0062.452] AreFileApisANSI () returned 1 [0062.452] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f658, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0062.453] CloseHandle (hObject=0xbc) returned 1 [0062.453] AreFileApisANSI () returned 1 [0062.453] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x128f258, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0062.454] CloseHandle (hObject=0xbc) returned 1 [0062.455] AreFileApisANSI () returned 1 [0062.455] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0062.461] CloseHandle (hObject=0xb8) returned 1 [0062.461] AreFileApisANSI () returned 1 [0062.461] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0062.462] CloseHandle (hObject=0xb8) returned 1 [0062.463] AreFileApisANSI () returned 1 [0062.463] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1294978, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0062.464] CloseHandle (hObject=0xb8) returned 1 [0062.464] AreFileApisANSI () returned 1 [0062.464] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0062.528] CloseHandle (hObject=0xbc) returned 1 [0062.528] AreFileApisANSI () returned 1 [0062.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0062.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12b2760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0062.528] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe.config"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config.cryptoid" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe.config.cryptoid"), dwFlags=0x2) returned 1 [0062.570] AreFileApisANSI () returned 1 [0062.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12b2130, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0062.573] CloseHandle (hObject=0xb8) returned 1 [0062.573] AreFileApisANSI () returned 1 [0062.573] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1292280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0062.575] CloseHandle (hObject=0xb8) returned 1 [0062.575] AreFileApisANSI () returned 1 [0062.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x12b2238, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0062.576] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\fre\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\microsoft office\\root\\fre\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0xdfc260, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0062.617] GetFileType (hFile=0xb8) returned 0x1 [0062.618] WriteFile (in: hFile=0xb8, lpBuffer=0xdfaf0c*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0xdfaf04, lpOverlapped=0x0 | out: lpBuffer=0xdfaf0c*, lpNumberOfBytesWritten=0xdfaf04*=0x423, lpOverlapped=0x0) returned 1 [0062.619] CloseHandle (hObject=0xb8) returned 1 [0062.619] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\fre\\*", lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 0x129d940 [0062.619] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0062.619] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0062.619] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0062.620] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0062.620] FindNextFileA (in: hFindFile=0x129d940, lpFindFileData=0xdfc58c | out: lpFindFileData=0xdfc58c) returned 1 [0062.620] AreFileApisANSI () returned 1 [0062.620] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdfcacc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0062.620] CreateFileW (lpFileName="C:\\\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0xdfc224, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0062.620] GetFileType (hFile=0xbc) returned 0x1 [0062.620] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d4 | out: lpNewFilePointer=0x0) returned 1 [0062.621] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc288 | out: lpNewFilePointer=0x0) returned 1 [0062.621] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2b8 | out: lpNewFilePointer=0x0) returned 1 [0062.621] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.621] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.621] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2b8 | out: lpNewFilePointer=0x0) returned 1 [0062.621] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.621] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.621] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.623] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.623] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.623] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.624] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.624] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.624] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.624] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.624] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.928] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.928] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.929] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.929] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.929] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.929] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.929] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.929] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.929] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.929] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.930] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.930] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.930] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.930] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.930] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.930] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.930] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.930] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.930] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.931] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.931] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.931] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.931] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.931] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.931] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.931] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.931] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.931] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.932] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.932] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.932] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.932] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.932] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.932] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.932] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.932] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.932] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.933] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.933] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.933] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.933] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.933] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.933] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.933] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.933] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.934] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.934] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.934] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.934] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.934] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.934] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.934] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.934] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.934] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.934] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.935] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.935] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.935] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.935] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.935] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.958] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.958] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.958] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.958] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.958] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.958] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.958] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.959] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.959] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.959] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.959] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.959] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.959] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.959] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.959] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.959] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.959] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.960] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.960] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.960] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.960] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.960] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.960] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.960] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.960] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.960] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.960] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.960] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.960] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.961] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.961] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.961] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.961] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.961] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.961] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.961] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.961] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.961] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.961] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.962] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.962] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.962] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.962] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.962] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.962] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.962] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.962] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.962] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.962] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.963] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.963] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.963] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.963] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.963] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.963] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.963] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.963] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.963] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.963] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.963] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.963] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.964] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.964] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.964] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.964] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.964] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.964] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.964] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.964] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.964] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.964] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.964] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.965] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.965] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.965] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.965] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.965] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.965] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.965] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.965] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.965] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.965] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.965] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.966] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.966] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.974] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.974] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.974] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.974] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.974] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.974] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.974] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.974] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.974] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.975] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.975] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.975] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.975] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.975] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.975] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.975] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.975] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.975] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.975] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.976] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.976] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.976] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.976] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.976] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.976] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.976] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.976] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.976] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.976] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.976] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.977] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.977] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.977] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.977] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.977] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.977] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.977] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.977] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.977] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.977] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.978] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.978] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.978] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.978] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.978] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.978] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.978] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.978] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.978] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.978] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.979] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.979] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.979] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.979] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.979] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.979] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.979] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.979] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.979] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.980] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.980] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.980] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.980] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.980] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.980] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.980] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.980] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.980] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.980] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.980] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.981] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.981] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.981] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.981] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.981] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.981] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.981] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.981] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.981] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.981] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.981] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.987] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.987] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.988] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.988] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.988] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.988] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.988] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.988] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.988] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.988] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.988] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.989] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.989] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.989] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.989] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.989] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.989] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.989] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.989] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.989] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.989] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.989] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.989] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.990] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.990] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.990] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.990] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.990] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.990] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.990] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.990] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.990] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.990] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.990] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.991] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.991] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.991] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.991] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.991] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.991] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.991] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.991] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.991] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.991] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.991] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.992] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.992] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.992] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.992] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.992] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.992] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.992] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.992] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.992] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.992] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.993] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.993] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 [0062.993] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc284 | out: lpNewFilePointer=0x0) returned 1 [0062.993] WriteFile (in: hFile=0xbc, lpBuffer=0x12a0018*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesWritten=0xdfc250*=0x8, lpOverlapped=0x0) returned 1 [0062.993] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2ac | out: lpNewFilePointer=0x0) returned 1 [0062.993] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc240 | out: lpNewFilePointer=0x0) returned 1 [0062.993] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2bc | out: lpNewFilePointer=0x0) returned 1 [0062.993] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc270 | out: lpNewFilePointer=0x0) returned 1 [0062.993] ReadFile (in: hFile=0xbc, lpBuffer=0x12a0018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xdfc250, lpOverlapped=0x0 | out: lpBuffer=0x12a0018*, lpNumberOfBytesRead=0xdfc250*=0x1000, lpOverlapped=0x0) returned 1 [0062.993] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2c0 | out: lpNewFilePointer=0x0) returned 1 [0062.993] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc254 | out: lpNewFilePointer=0x0) returned 1 [0062.994] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0xdfc2d0 | out: lpNewFilePointer=0x0) returned 1 Thread: id = 2 os_tid = 0xe1c Thread: id = 3 os_tid = 0xc24 Process: id = "2" image_name = "tree.exe" filename = "c:\\users\\ciihmnxmn6ps\\desktop\\tree.exe" page_root = "0x60248000" os_pid = "0x6f4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe\" e" cur_dir = "C:\\Windows\\system32\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00017066" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 181 start_va = 0x250000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 182 start_va = 0x270000 end_va = 0x271fff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 183 start_va = 0x280000 end_va = 0x293fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000280000" filename = "" Region: id = 184 start_va = 0x2a0000 end_va = 0x2dffff entry_point = 0x0 region_type = private name = "private_0x00000000002a0000" filename = "" Region: id = 185 start_va = 0x2e0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 186 start_va = 0x3e0000 end_va = 0x3e3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003e0000" filename = "" Region: id = 187 start_va = 0x3f0000 end_va = 0x3f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 188 start_va = 0x400000 end_va = 0x401fff entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 189 start_va = 0xed0000 end_va = 0xf35fff entry_point = 0xed0000 region_type = mapped_file name = "tree.exe" filename = "\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\tree.exe") Region: id = 190 start_va = 0x77be0000 end_va = 0x77d58fff entry_point = 0x77be0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 191 start_va = 0x7fbd0000 end_va = 0x7fbf2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007fbd0000" filename = "" Region: id = 192 start_va = 0x7fbf7000 end_va = 0x7fbf7fff entry_point = 0x0 region_type = private name = "private_0x000000007fbf7000" filename = "" Region: id = 193 start_va = 0x7fbfc000 end_va = 0x7fbfefff entry_point = 0x0 region_type = private name = "private_0x000000007fbfc000" filename = "" Region: id = 194 start_va = 0x7fbff000 end_va = 0x7fbfffff entry_point = 0x0 region_type = private name = "private_0x000000007fbff000" filename = "" Region: id = 195 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 196 start_va = 0x7fff0000 end_va = 0x7ffcecffffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 197 start_va = 0x7ffced000000 end_va = 0x7ffced1c1fff entry_point = 0x7ffced000000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 198 start_va = 0x7ffced1c2000 end_va = 0x7ffffffeffff entry_point = 0x0 region_type = private name = "private_0x00007ffced1c2000" filename = "" Region: id = 337 start_va = 0x420000 end_va = 0x42ffff entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 338 start_va = 0x76440000 end_va = 0x7648efff entry_point = 0x76440000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 339 start_va = 0x76490000 end_va = 0x76502fff entry_point = 0x76490000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 340 start_va = 0x76430000 end_va = 0x76437fff entry_point = 0x76430000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 341 start_va = 0x480000 end_va = 0x57ffff entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 342 start_va = 0x768d0000 end_va = 0x76a45fff entry_point = 0x768d0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 343 start_va = 0x76c20000 end_va = 0x76d0ffff entry_point = 0x76c20000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 344 start_va = 0x250000 end_va = 0x25ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 345 start_va = 0x260000 end_va = 0x263fff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 346 start_va = 0x430000 end_va = 0x46ffff entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 347 start_va = 0x580000 end_va = 0x63dfff entry_point = 0x580000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 348 start_va = 0x640000 end_va = 0x73ffff entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 349 start_va = 0x74ba0000 end_va = 0x74bf8fff entry_point = 0x74ba0000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 350 start_va = 0x74c00000 end_va = 0x74c1dfff entry_point = 0x74c00000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 351 start_va = 0x74da0000 end_va = 0x74e1afff entry_point = 0x74da0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 352 start_va = 0x76510000 end_va = 0x76519fff entry_point = 0x76510000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 353 start_va = 0x76520000 end_va = 0x76562fff entry_point = 0x76520000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 354 start_va = 0x766a0000 end_va = 0x7675dfff entry_point = 0x766a0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 355 start_va = 0x77870000 end_va = 0x7791bfff entry_point = 0x77870000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 356 start_va = 0x7fad0000 end_va = 0x7fbcffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007fad0000" filename = "" Region: id = 357 start_va = 0x7fbf9000 end_va = 0x7fbfbfff entry_point = 0x0 region_type = private name = "private_0x000000007fbf9000" filename = "" Region: id = 358 start_va = 0x8d0000 end_va = 0x8dffff entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 359 start_va = 0x270000 end_va = 0x270fff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 360 start_va = 0x270000 end_va = 0x270fff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 361 start_va = 0x270000 end_va = 0x272fff entry_point = 0x270000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 362 start_va = 0x410000 end_va = 0x418fff entry_point = 0x410000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 363 start_va = 0x270000 end_va = 0x272fff entry_point = 0x270000 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 364 start_va = 0x410000 end_va = 0x418fff entry_point = 0x410000 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Thread: id = 4 os_tid = 0x41c [0124.223] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0124.225] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x768d0000 [0124.225] GetProcAddress (hModule=0x768d0000, lpProcName=0xefeffc) returned 0x76983ae0 [0124.226] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x768d0000 [0124.226] GetProcAddress (hModule=0x768d0000, lpProcName="FlsAlloc") returned 0x76986530 [0124.226] GetProcAddress (hModule=0x768d0000, lpProcName="FlsSetValue") returned 0x76983770 [0124.230] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x768d0000 [0124.230] GetProcAddress (hModule=0x768d0000, lpProcName="InitializeCriticalSectionEx") returned 0x76983ae0 [0124.230] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x768d0000 [0124.230] GetProcAddress (hModule=0x768d0000, lpProcName="FlsAlloc") returned 0x76986530 [0124.230] GetLastError () returned 0x0 [0124.231] GetProcAddress (hModule=0x768d0000, lpProcName="FlsGetValue") returned 0x7697a7b0 [0124.231] GetProcAddress (hModule=0x768d0000, lpProcName="FlsSetValue") returned 0x76983770 [0124.231] SetLastError (dwErrCode=0x0) [0124.232] GetStartupInfoW (in: lpStartupInfo=0x3dfb44 | out: lpStartupInfo=0x3dfb44*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xee1ab0, hStdOutput=0x2646a701, hStdError=0xfffffffe)) [0124.232] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0124.232] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0124.232] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0124.232] GetCommandLineA () returned="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe\" e" [0124.232] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe\" e" [0124.233] GetACP () returned 0x4e4 [0124.233] IsValidCodePage (CodePage=0x4e4) returned 1 [0124.233] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x3dfb64 | out: lpCPInfo=0x3dfb64) returned 1 [0124.233] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x3df42c | out: lpCPInfo=0x3df42c) returned 1 [0124.233] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3dfa40, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0124.233] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3dfa40, cbMultiByte=256, lpWideCharStr=0x3df1c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿîĀ") returned 256 [0124.233] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿîĀ", cchSrc=256, lpCharType=0x3df440 | out: lpCharType=0x3df440) returned 1 [0124.234] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3dfa40, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0124.234] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3dfa40, cbMultiByte=256, lpWideCharStr=0x3df178, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0124.234] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x768d0000 [0124.234] GetProcAddress (hModule=0x768d0000, lpProcName="LCMapStringEx") returned 0x76973690 [0124.234] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0124.234] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x3def68, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0124.234] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x3df940, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x1d\x8e\x8b\x26\x7c\xfb\x3d", lpUsedDefaultChar=0x0) returned 256 [0124.234] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3dfa40, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0124.234] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x3dfa40, cbMultiByte=256, lpWideCharStr=0x3df198, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿîĀ") returned 256 [0124.234] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿîĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0124.234] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿîĀ", cchSrc=256, lpDestStr=0x3def88, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0124.234] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x3df840, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x1d\x8e\x8b\x26\x7c\xfb\x3d", lpUsedDefaultChar=0x0) returned 256 [0124.234] GetModuleFileNameA (in: hModule=0x0, lpFilename=0xf2e118, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\tree.exe")) returned 0x26 [0124.234] RtlInitializeSListHead (in: ListHead=0xf2ded0 | out: ListHead=0xf2ded0) [0124.235] GetLastError () returned 0x0 [0124.235] SetLastError (dwErrCode=0x0) [0124.235] GetEnvironmentStringsW () returned 0x489fe8* [0124.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1359, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1359 [0124.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1359, lpMultiByteStr=0x48aa90, cbMultiByte=1359, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1359 [0124.235] FreeEnvironmentStringsW (penv=0x489fe8) returned 1 [0124.236] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0124.236] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c3a330 [0124.236] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3f400 [0124.236] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c37580 [0124.236] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c39910 [0124.236] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c46030 [0124.236] GetProcAddress (hModule=0x76c20000, lpProcName="InitOnceExecuteOnce") returned 0x76983090 [0124.236] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76c45f90 [0124.236] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreW") returned 0x76c46000 [0124.236] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76c45ff0 [0124.236] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c3a690 [0124.236] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x77c140f0 [0124.236] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77c0d630 [0124.237] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x77c0ecf0 [0124.237] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c45720 [0124.237] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x77c0e140 [0124.237] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x77c0eb60 [0124.237] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77c49990 [0124.237] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77c45540 [0124.237] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x77c39dc0 [0124.237] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76c60a40 [0124.237] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x76983c90 [0124.237] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c38710 [0124.237] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleEx") returned 0x76c610d0 [0124.237] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandle") returned 0x76c46520 [0124.237] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimePreciseAsFileTime") returned 0x76c465e0 [0124.237] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeConditionVariable") returned 0x77c39da0 [0124.238] GetProcAddress (hModule=0x76c20000, lpProcName="WakeConditionVariable") returned 0x77c45860 [0124.238] GetProcAddress (hModule=0x76c20000, lpProcName="WakeAllConditionVariable") returned 0x77c43370 [0124.238] GetProcAddress (hModule=0x76c20000, lpProcName="SleepConditionVariableCS") returned 0x76a02850 [0124.238] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeSRWLock") returned 0x77c39da0 [0124.238] GetProcAddress (hModule=0x76c20000, lpProcName="AcquireSRWLockExclusive") returned 0x77c16db0 [0124.238] GetProcAddress (hModule=0x76c20000, lpProcName="TryAcquireSRWLockExclusive") returned 0x77c0aca0 [0124.238] GetProcAddress (hModule=0x76c20000, lpProcName="ReleaseSRWLockExclusive") returned 0x77c16c60 [0124.238] GetProcAddress (hModule=0x76c20000, lpProcName="SleepConditionVariableSRW") returned 0x76a028a0 [0124.238] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWork") returned 0x76c3e9f0 [0124.238] GetProcAddress (hModule=0x76c20000, lpProcName="SubmitThreadpoolWork") returned 0x77c16a40 [0124.238] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWork") returned 0x77c02500 [0124.238] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76c3fa30 [0124.238] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76c3a000 [0124.239] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76c39970 [0124.239] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0124.239] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeConditionVariable") returned 0x77c39da0 [0124.239] GetProcAddress (hModule=0x76c20000, lpProcName="SleepConditionVariableCS") returned 0x76a02850 [0124.239] GetProcAddress (hModule=0x76c20000, lpProcName="WakeAllConditionVariable") returned 0x77c43370 [0124.239] RtlInitializeConditionVariable (in: ConditionVariable=0xf2deac | out: ConditionVariable=0xf2deac) [0124.239] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0124.240] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xede1c3) returned 0x0 [0124.241] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x76c20000 [0124.241] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76c3f9b0 [0124.241] LoadLibraryExW (lpLibFileName="api-ms-win-core-string-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x768d0000 [0124.241] GetProcAddress (hModule=0x768d0000, lpProcName="CompareStringEx") returned 0x76974500 [0124.241] GetProcAddress (hModule=0x768d0000, lpProcName="EnumSystemLocalesEx") returned 0x7698e350 [0124.241] LoadLibraryExW (lpLibFileName="api-ms-win-core-datetime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x768d0000 [0124.241] GetProcAddress (hModule=0x768d0000, lpProcName="GetDateFormatEx") returned 0x769db710 [0124.241] GetProcAddress (hModule=0x768d0000, lpProcName="GetLocaleInfoEx") returned 0x7696d3f0 [0124.241] GetProcAddress (hModule=0x768d0000, lpProcName="GetTimeFormatEx") returned 0x769db9e0 [0124.241] GetProcAddress (hModule=0x768d0000, lpProcName="GetUserDefaultLocaleName") returned 0x76982510 [0124.242] GetProcAddress (hModule=0x768d0000, lpProcName="IsValidLocaleName") returned 0x7696c210 [0124.242] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-obsolete-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x768d0000 [0124.242] GetProcAddress (hModule=0x768d0000, lpProcName="LCIDToLocaleName") returned 0x769804a0 [0124.242] GetProcAddress (hModule=0x768d0000, lpProcName="LocaleNameToLCID") returned 0x769864c0 [0124.242] GetLastError () returned 0x0 [0124.242] SetLastError (dwErrCode=0x0) [0124.242] GetLastError () returned 0x0 [0124.242] SetLastError (dwErrCode=0x0) [0124.243] GetLastError () returned 0x0 [0124.243] SetLastError (dwErrCode=0x0) [0124.243] GetLastError () returned 0x0 [0124.243] SetLastError (dwErrCode=0x0) [0124.243] GetLastError () returned 0x0 [0124.243] SetLastError (dwErrCode=0x0) [0124.243] GetLastError () returned 0x0 [0124.243] SetLastError (dwErrCode=0x0) [0124.243] GetLastError () returned 0x0 [0124.243] SetLastError (dwErrCode=0x0) [0124.243] GetLastError () returned 0x0 [0124.243] SetLastError (dwErrCode=0x0) [0124.244] GetLastError () returned 0x0 [0124.244] SetLastError (dwErrCode=0x0) [0124.244] GetLastError () returned 0x0 [0124.244] SetLastError (dwErrCode=0x0) [0124.244] GetLastError () returned 0x0 [0124.244] SetLastError (dwErrCode=0x0) [0124.244] GetLastError () returned 0x0 [0124.244] SetLastError (dwErrCode=0x0) [0124.244] GetLastError () returned 0x0 [0124.244] SetLastError (dwErrCode=0x0) [0124.244] GetLastError () returned 0x0 [0124.244] SetLastError (dwErrCode=0x0) [0124.247] AreFileApisANSI () returned 1 [0124.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0124.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48ff98, cbMultiByte=-1, lpWideCharStr=0x48af10, cchWideChar=52 | out: lpWideCharStr="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\000000000.key") returned 52 [0124.247] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\000000000.key" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\000000000.key"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x80 [0124.248] GetFileType (hFile=0x80) returned 0x1 [0124.248] GetFileInformationByHandle (in: hFile=0x80, lpFileInformation=0x3df928 | out: lpFileInformation=0x3df928) returned 1 [0124.248] FileTimeToSystemTime (in: lpFileTime=0x3df8fc, lpSystemTime=0x3df8d0 | out: lpSystemTime=0x3df8d0) returned 1 [0124.249] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x3df8d0, lpLocalTime=0x3df8e0 | out: lpLocalTime=0x3df8e0) returned 1 [0124.250] GetTimeZoneInformation (in: lpTimeZoneInformation=0xf2e588 | out: lpTimeZoneInformation=0xf2e588) returned 0x2 [0124.277] GetLastError () returned 0x0 [0124.277] SetLastError (dwErrCode=0x0) [0124.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Standard Time", cchWideChar=-1, lpMultiByteStr=0xf2cad0, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x3df6c8 | out: lpMultiByteStr="AUS Eastern Standard Time", lpUsedDefaultChar=0x3df6c8) returned 26 [0124.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Daylight Time", cchWideChar=-1, lpMultiByteStr=0xf2cb10, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x3df6c8 | out: lpMultiByteStr="AUS Eastern Daylight Time", lpUsedDefaultChar=0x3df6c8) returned 26 [0124.277] FileTimeToSystemTime (in: lpFileTime=0x3df8ec, lpSystemTime=0x3df8c0 | out: lpSystemTime=0x3df8c0) returned 1 [0124.277] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x3df8c0, lpLocalTime=0x3df8d0 | out: lpLocalTime=0x3df8d0) returned 1 [0124.277] FileTimeToSystemTime (in: lpFileTime=0x3df8dc, lpSystemTime=0x3df8b0 | out: lpSystemTime=0x3df8b0) returned 1 [0124.277] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x3df8b0, lpLocalTime=0x3df8c0 | out: lpLocalTime=0x3df8c0) returned 1 [0124.278] CloseHandle (hObject=0x80) returned 1 [0124.278] AreFileApisANSI () returned 1 [0124.278] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0124.278] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48ff98, cbMultiByte=-1, lpWideCharStr=0x48e160, cchWideChar=52 | out: lpWideCharStr="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\000000000.key") returned 52 [0124.278] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\000000000.key" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\000000000.key"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x3df7e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x80 [0124.278] GetFileType (hFile=0x80) returned 0x1 [0124.279] GetLastError () returned 0x0 [0124.279] SetLastError (dwErrCode=0x0) [0124.279] GetLastError () returned 0x0 [0124.279] SetLastError (dwErrCode=0x0) [0124.279] GetLastError () returned 0x0 [0124.279] SetLastError (dwErrCode=0x0) [0124.279] GetLastError () returned 0x0 [0124.279] SetLastError (dwErrCode=0x0) [0124.279] GetLastError () returned 0x0 [0124.279] SetLastError (dwErrCode=0x0) [0124.279] GetLastError () returned 0x0 [0124.279] SetLastError (dwErrCode=0x0) [0124.279] GetLastError () returned 0x0 [0124.279] SetLastError (dwErrCode=0x0) [0124.279] GetLastError () returned 0x0 [0124.279] SetLastError (dwErrCode=0x0) [0124.279] GetLastError () returned 0x0 [0124.279] SetLastError (dwErrCode=0x0) [0124.280] GetLastError () returned 0x0 [0124.280] SetLastError (dwErrCode=0x0) [0124.280] GetLastError () returned 0x0 [0124.280] SetLastError (dwErrCode=0x0) [0124.280] SetFilePointerEx (in: hFile=0x80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3df894 | out: lpNewFilePointer=0x0) returned 1 [0124.280] SetFilePointerEx (in: hFile=0x80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3df848 | out: lpNewFilePointer=0x0) returned 1 [0124.280] SetFilePointerEx (in: hFile=0x80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3df878 | out: lpNewFilePointer=0x0) returned 1 [0124.280] SetFilePointerEx (in: hFile=0x80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3df894 | out: lpNewFilePointer=0x0) returned 1 [0124.280] SetFilePointerEx (in: hFile=0x80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3df848 | out: lpNewFilePointer=0x0) returned 1 [0124.281] ReadFile (in: hFile=0x80, lpBuffer=0x48ffe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3df808, lpOverlapped=0x0 | out: lpBuffer=0x48ffe8*, lpNumberOfBytesRead=0x3df808*=0x10, lpOverlapped=0x0) returned 1 [0124.283] ReadFile (in: hFile=0x80, lpBuffer=0x48ffe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3df808, lpOverlapped=0x0 | out: lpBuffer=0x48ffe8*, lpNumberOfBytesRead=0x3df808*=0x0, lpOverlapped=0x0) returned 1 [0124.283] CloseHandle (hObject=0x80) returned 1 [0124.283] GetStartupInfoW (in: lpStartupInfo=0x3dfbac | out: lpStartupInfo=0x3dfbac*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0124.283] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3df9d4, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\tree.exe")) returned 0x26 [0124.284] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x3df5a4, lpdwDisposition=0x0 | out: phkResult=0x3df5a4*=0x88, lpdwDisposition=0x0) returned 0x0 [0124.284] RegSetValueExW (in: hKey=0x88, lpValueName="MSFEEditor", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe\" e", cbData=0x56 | out: lpData="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\tree.exe\" e") returned 0x0 [0124.284] RegCloseKey (hKey=0x88) returned 0x0 [0124.284] GetLogicalDriveStringsA (in: nBufferLength=0x100, lpBuffer=0x3df8b8 | out: lpBuffer="C:\\") returned 0x4 [0124.284] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0124.284] GetLastError () returned 0x0 [0124.284] SetLastError (dwErrCode=0x0) [0124.284] GetLastError () returned 0x0 [0124.284] GetProcAddress (hModule=0x768d0000, lpProcName="FlsGetValue") returned 0x7697a7b0 [0124.284] SetLastError (dwErrCode=0x0) [0124.284] GetLastError () returned 0x0 [0124.284] SetLastError (dwErrCode=0x0) [0124.285] GetLastError () returned 0x0 [0124.285] SetLastError (dwErrCode=0x0) [0124.285] GetLastError () returned 0x0 [0124.285] SetLastError (dwErrCode=0x0) [0124.285] GetLastError () returned 0x0 [0124.285] SetLastError (dwErrCode=0x0) [0124.285] lstrlenA (lpString="C:\\") returned 3 [0124.285] AreFileApisANSI () returned 1 [0124.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0124.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x48af38, cchWideChar=25 | out: lpWideCharStr="C:\\\\CRYPTOID_BLOCKED.txt") returned 25 [0124.285] CreateFileW (lpFileName="C:\\\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3debf4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.286] GetLastError () returned 0x5 [0124.286] GetLastError () returned 0x5 [0124.286] SetLastError (dwErrCode=0x5) [0124.286] GetLastError () returned 0x5 [0124.286] SetLastError (dwErrCode=0x5) [0124.286] GetLastError () returned 0x5 [0124.286] SetLastError (dwErrCode=0x5) [0124.286] GetLastError () returned 0x5 [0124.286] SetLastError (dwErrCode=0x5) [0124.287] AreFileApisANSI () returned 1 [0124.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0124.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x48f5a8, cchWideChar=22 | out: lpWideCharStr="C:\\\\CRYPTOID_HELP.txt") returned 22 [0124.287] CreateFileW (lpFileName="C:\\\\CRYPTOID_HELP.txt" (normalized: "c:\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3debf4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.288] GetLastError () returned 0x5 [0124.288] GetLastError () returned 0x5 [0124.288] SetLastError (dwErrCode=0x5) [0124.288] GetLastError () returned 0x5 [0124.288] SetLastError (dwErrCode=0x5) [0124.288] GetLastError () returned 0x5 [0124.288] SetLastError (dwErrCode=0x5) [0124.288] GetLastError () returned 0x5 [0124.288] SetLastError (dwErrCode=0x5) [0124.289] AreFileApisANSI () returned 1 [0124.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0124.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x48af38, cchWideChar=25 | out: lpWideCharStr="C:\\\\CRYPTOID_MESSAGE.txt") returned 25 [0124.289] CreateFileW (lpFileName="C:\\\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3debf4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.290] GetLastError () returned 0x5 [0124.290] GetLastError () returned 0x5 [0124.290] SetLastError (dwErrCode=0x5) [0124.290] GetLastError () returned 0x5 [0124.290] SetLastError (dwErrCode=0x5) [0124.290] GetLastError () returned 0x5 [0124.290] SetLastError (dwErrCode=0x5) [0124.290] GetLastError () returned 0x5 [0124.290] SetLastError (dwErrCode=0x5) [0124.290] FindFirstFileA (in: lpFileName="C:\\\\*", lpFindFileData=0x3def20 | out: lpFindFileData=0x3def20) returned 0x48ed88 [0124.291] AreFileApisANSI () returned 1 [0124.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0124.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5e0, cbMultiByte=-1, lpWideCharStr=0x48e218, cchWideChar=38 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\CRYPTOID_BLOCKED.txt") returned 38 [0124.291] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\$recycle.bin\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.291] GetLastError () returned 0x5 [0124.291] GetLastError () returned 0x5 [0124.291] SetLastError (dwErrCode=0x5) [0124.291] GetLastError () returned 0x5 [0124.291] SetLastError (dwErrCode=0x5) [0124.291] GetLastError () returned 0x5 [0124.292] SetLastError (dwErrCode=0x5) [0124.292] GetLastError () returned 0x5 [0124.292] SetLastError (dwErrCode=0x5) [0124.292] AreFileApisANSI () returned 1 [0124.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 35 [0124.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x48af38, cchWideChar=35 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\CRYPTOID_HELP.txt") returned 35 [0124.292] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\CRYPTOID_HELP.txt" (normalized: "c:\\$recycle.bin\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.292] GetLastError () returned 0x5 [0124.292] GetLastError () returned 0x5 [0124.292] SetLastError (dwErrCode=0x5) [0124.292] GetLastError () returned 0x5 [0124.292] SetLastError (dwErrCode=0x5) [0124.292] GetLastError () returned 0x5 [0124.292] SetLastError (dwErrCode=0x5) [0124.292] GetLastError () returned 0x5 [0124.292] SetLastError (dwErrCode=0x5) [0124.293] AreFileApisANSI () returned 1 [0124.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0124.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x48e218, cchWideChar=38 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\CRYPTOID_MESSAGE.txt") returned 38 [0124.293] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\$recycle.bin\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.293] GetLastError () returned 0x5 [0124.293] GetLastError () returned 0x5 [0124.293] SetLastError (dwErrCode=0x5) [0124.293] GetLastError () returned 0x5 [0124.294] SetLastError (dwErrCode=0x5) [0124.294] GetLastError () returned 0x5 [0124.294] SetLastError (dwErrCode=0x5) [0124.294] GetLastError () returned 0x5 [0124.294] SetLastError (dwErrCode=0x5) [0124.294] FindFirstFileA (in: lpFileName="C:\\\\$Recycle.Bin\\*", lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 0x48af40 [0124.294] FindNextFileA (in: hFindFile=0x48af40, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.294] FindNextFileA (in: hFindFile=0x48af40, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.294] FindNextFileA (in: hFindFile=0x48af40, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.294] FindNextFileA (in: hFindFile=0x48af40, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.294] FindNextFileA (in: hFindFile=0x48af40, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.294] AreFileApisANSI () returned 1 [0124.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f308, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0124.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f308, cbMultiByte=-1, lpWideCharStr=0x48e218, cchWideChar=47 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-18\\CRYPTOID_BLOCKED.txt") returned 47 [0124.295] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\$recycle.bin\\s-1-5-18\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.299] GetLastError () returned 0x5 [0124.299] GetLastError () returned 0x5 [0124.299] SetLastError (dwErrCode=0x5) [0124.299] GetLastError () returned 0x5 [0124.299] SetLastError (dwErrCode=0x5) [0124.299] GetLastError () returned 0x5 [0124.299] SetLastError (dwErrCode=0x5) [0124.299] GetLastError () returned 0x5 [0124.299] SetLastError (dwErrCode=0x5) [0124.299] AreFileApisANSI () returned 1 [0124.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f4c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0124.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f4c8, cbMultiByte=-1, lpWideCharStr=0x48e218, cchWideChar=44 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-18\\CRYPTOID_HELP.txt") returned 44 [0124.299] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\CRYPTOID_HELP.txt" (normalized: "c:\\$recycle.bin\\s-1-5-18\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.300] GetLastError () returned 0x5 [0124.300] GetLastError () returned 0x5 [0124.300] SetLastError (dwErrCode=0x5) [0124.300] GetLastError () returned 0x5 [0124.300] SetLastError (dwErrCode=0x5) [0124.300] GetLastError () returned 0x5 [0124.300] SetLastError (dwErrCode=0x5) [0124.300] GetLastError () returned 0x5 [0124.300] SetLastError (dwErrCode=0x5) [0124.301] AreFileApisANSI () returned 1 [0124.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0124.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x48e218, cchWideChar=47 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-18\\CRYPTOID_MESSAGE.txt") returned 47 [0124.301] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\$recycle.bin\\s-1-5-18\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.301] GetLastError () returned 0x5 [0124.301] GetLastError () returned 0x5 [0124.301] SetLastError (dwErrCode=0x5) [0124.301] GetLastError () returned 0x5 [0124.301] SetLastError (dwErrCode=0x5) [0124.301] GetLastError () returned 0x5 [0124.301] SetLastError (dwErrCode=0x5) [0124.301] GetLastError () returned 0x5 [0124.301] SetLastError (dwErrCode=0x5) [0124.301] FindFirstFileA (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0xffffffff [0124.301] FindNextFileA (in: hFindFile=0x48af40, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.302] AreFileApisANSI () returned 1 [0124.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f230, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0124.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f230, cbMultiByte=-1, lpWideCharStr=0x48ae08, cchWideChar=84 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRYPTOID_BLOCKED.txt") returned 84 [0124.302] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\$recycle.bin\\s-1-5-21-1462094071-1423818996-289466292-1000\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0124.303] GetFileType (hFile=0x90) returned 0x1 [0124.304] GetLastError () returned 0xb7 [0124.304] SetLastError (dwErrCode=0xb7) [0124.304] WriteFile (in: hFile=0x90, lpBuffer=0x3dc5e0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3dc5d8, lpOverlapped=0x0 | out: lpBuffer=0x3dc5e0*, lpNumberOfBytesWritten=0x3dc5d8*=0x423, lpOverlapped=0x0) returned 1 [0124.304] CloseHandle (hObject=0x90) returned 1 [0124.305] AreFileApisANSI () returned 1 [0124.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f230, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0124.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f230, cbMultiByte=-1, lpWideCharStr=0x48ae08, cchWideChar=81 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRYPTOID_HELP.txt") returned 81 [0124.305] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRYPTOID_HELP.txt" (normalized: "c:\\$recycle.bin\\s-1-5-21-1462094071-1423818996-289466292-1000\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0124.306] GetFileType (hFile=0x90) returned 0x1 [0124.306] GetLastError () returned 0xb7 [0124.306] SetLastError (dwErrCode=0xb7) [0124.306] WriteFile (in: hFile=0x90, lpBuffer=0x3dc5e0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3dc5d8, lpOverlapped=0x0 | out: lpBuffer=0x3dc5e0*, lpNumberOfBytesWritten=0x3dc5d8*=0x423, lpOverlapped=0x0) returned 1 [0124.307] CloseHandle (hObject=0x90) returned 1 [0124.307] AreFileApisANSI () returned 1 [0124.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f230, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0124.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f230, cbMultiByte=-1, lpWideCharStr=0x48ae08, cchWideChar=84 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRYPTOID_MESSAGE.txt") returned 84 [0124.307] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\$recycle.bin\\s-1-5-21-1462094071-1423818996-289466292-1000\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0124.308] GetFileType (hFile=0x90) returned 0x1 [0124.308] GetLastError () returned 0xb7 [0124.308] SetLastError (dwErrCode=0xb7) [0124.308] WriteFile (in: hFile=0x90, lpBuffer=0x3dc5e0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3dc5d8, lpOverlapped=0x0 | out: lpBuffer=0x3dc5e0*, lpNumberOfBytesWritten=0x3dc5d8*=0x423, lpOverlapped=0x0) returned 1 [0124.309] CloseHandle (hObject=0x90) returned 1 [0124.309] FindFirstFileA (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48f230 [0124.309] FindNextFileA (in: hFindFile=0x48f230, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.309] FindNextFileA (in: hFindFile=0x48f230, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.309] FindNextFileA (in: hFindFile=0x48f230, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.310] FindNextFileA (in: hFindFile=0x48f230, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.310] FindNextFileA (in: hFindFile=0x48f230, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.310] FindNextFileA (in: hFindFile=0x48f230, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.310] FindClose (in: hFindFile=0x48f230 | out: hFindFile=0x48f230) returned 1 [0124.310] FindNextFileA (in: hFindFile=0x48af40, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 0 [0124.310] FindClose (in: hFindFile=0x48af40 | out: hFindFile=0x48af40) returned 1 [0124.310] FindNextFileA (in: hFindFile=0x48ed88, lpFindFileData=0x3def20 | out: lpFindFileData=0x3def20) returned 1 [0124.310] AreFileApisANSI () returned 1 [0124.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4926c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0124.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4926c8, cbMultiByte=-1, lpWideCharStr=0x48af10, cchWideChar=30 | out: lpWideCharStr="C:\\\\Boot\\CRYPTOID_BLOCKED.txt") returned 30 [0124.310] CreateFileW (lpFileName="C:\\\\Boot\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.311] GetLastError () returned 0x5 [0124.311] GetLastError () returned 0x5 [0124.311] SetLastError (dwErrCode=0x5) [0124.311] GetLastError () returned 0x5 [0124.311] SetLastError (dwErrCode=0x5) [0124.311] GetLastError () returned 0x5 [0124.311] SetLastError (dwErrCode=0x5) [0124.311] GetLastError () returned 0x5 [0124.311] SetLastError (dwErrCode=0x5) [0124.311] AreFileApisANSI () returned 1 [0124.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x492510, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 27 [0124.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x492510, cbMultiByte=-1, lpWideCharStr=0x48af10, cchWideChar=27 | out: lpWideCharStr="C:\\\\Boot\\CRYPTOID_HELP.txt") returned 27 [0124.312] CreateFileW (lpFileName="C:\\\\Boot\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.312] GetLastError () returned 0x5 [0124.312] GetLastError () returned 0x5 [0124.312] SetLastError (dwErrCode=0x5) [0124.312] GetLastError () returned 0x5 [0124.312] SetLastError (dwErrCode=0x5) [0124.312] GetLastError () returned 0x5 [0124.312] SetLastError (dwErrCode=0x5) [0124.312] GetLastError () returned 0x5 [0124.312] SetLastError (dwErrCode=0x5) [0124.312] AreFileApisANSI () returned 1 [0124.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x492650, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0124.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x492650, cbMultiByte=-1, lpWideCharStr=0x48af10, cchWideChar=30 | out: lpWideCharStr="C:\\\\Boot\\CRYPTOID_MESSAGE.txt") returned 30 [0124.312] CreateFileW (lpFileName="C:\\\\Boot\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.313] GetLastError () returned 0x5 [0124.313] GetLastError () returned 0x5 [0124.313] SetLastError (dwErrCode=0x5) [0124.313] GetLastError () returned 0x5 [0124.313] SetLastError (dwErrCode=0x5) [0124.313] GetLastError () returned 0x5 [0124.313] SetLastError (dwErrCode=0x5) [0124.313] GetLastError () returned 0x5 [0124.313] SetLastError (dwErrCode=0x5) [0124.313] FindFirstFileA (in: lpFileName="C:\\\\Boot\\*", lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 0x48af10 [0124.313] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.314] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.314] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.314] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.314] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.314] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.314] AreFileApisANSI () returned 1 [0124.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x48e218, cchWideChar=36 | out: lpWideCharStr="C:\\\\Boot\\bg-BG\\CRYPTOID_BLOCKED.txt") returned 36 [0124.314] CreateFileW (lpFileName="C:\\\\Boot\\bg-BG\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\bg-bg\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.320] GetLastError () returned 0x5 [0124.320] GetLastError () returned 0x5 [0124.320] SetLastError (dwErrCode=0x5) [0124.320] GetLastError () returned 0x5 [0124.320] SetLastError (dwErrCode=0x5) [0124.320] GetLastError () returned 0x5 [0124.320] SetLastError (dwErrCode=0x5) [0124.320] GetLastError () returned 0x5 [0124.320] SetLastError (dwErrCode=0x5) [0124.320] AreFileApisANSI () returned 1 [0124.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x48e218, cchWideChar=33 | out: lpWideCharStr="C:\\\\Boot\\bg-BG\\CRYPTOID_HELP.txt") returned 33 [0124.320] CreateFileW (lpFileName="C:\\\\Boot\\bg-BG\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\bg-bg\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.321] GetLastError () returned 0x5 [0124.321] GetLastError () returned 0x5 [0124.321] SetLastError (dwErrCode=0x5) [0124.321] GetLastError () returned 0x5 [0124.321] SetLastError (dwErrCode=0x5) [0124.321] GetLastError () returned 0x5 [0124.321] SetLastError (dwErrCode=0x5) [0124.321] GetLastError () returned 0x5 [0124.321] SetLastError (dwErrCode=0x5) [0124.321] AreFileApisANSI () returned 1 [0124.321] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.321] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x48e218, cchWideChar=36 | out: lpWideCharStr="C:\\\\Boot\\bg-BG\\CRYPTOID_MESSAGE.txt") returned 36 [0124.321] CreateFileW (lpFileName="C:\\\\Boot\\bg-BG\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\bg-bg\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.322] GetLastError () returned 0x5 [0124.322] GetLastError () returned 0x5 [0124.322] SetLastError (dwErrCode=0x5) [0124.322] GetLastError () returned 0x5 [0124.322] SetLastError (dwErrCode=0x5) [0124.322] GetLastError () returned 0x5 [0124.322] SetLastError (dwErrCode=0x5) [0124.322] GetLastError () returned 0x5 [0124.322] SetLastError (dwErrCode=0x5) [0124.322] FindFirstFileA (in: lpFileName="C:\\\\Boot\\bg-BG\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.322] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.322] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.322] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.323] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.323] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.323] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.323] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.323] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.323] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.323] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.323] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.323] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.323] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.323] AreFileApisANSI () returned 1 [0124.323] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f650, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.323] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f650, cbMultiByte=-1, lpWideCharStr=0x48e218, cchWideChar=36 | out: lpWideCharStr="C:\\\\Boot\\cs-CZ\\CRYPTOID_BLOCKED.txt") returned 36 [0124.323] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\cs-cz\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.328] GetLastError () returned 0x5 [0124.328] GetLastError () returned 0x5 [0124.328] SetLastError (dwErrCode=0x5) [0124.328] GetLastError () returned 0x5 [0124.328] SetLastError (dwErrCode=0x5) [0124.328] GetLastError () returned 0x5 [0124.328] SetLastError (dwErrCode=0x5) [0124.328] GetLastError () returned 0x5 [0124.328] SetLastError (dwErrCode=0x5) [0124.328] AreFileApisANSI () returned 1 [0124.328] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.328] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x48e218, cchWideChar=33 | out: lpWideCharStr="C:\\\\Boot\\cs-CZ\\CRYPTOID_HELP.txt") returned 33 [0124.328] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\cs-cz\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.329] GetLastError () returned 0x5 [0124.329] GetLastError () returned 0x5 [0124.329] SetLastError (dwErrCode=0x5) [0124.329] GetLastError () returned 0x5 [0124.329] SetLastError (dwErrCode=0x5) [0124.329] GetLastError () returned 0x5 [0124.329] SetLastError (dwErrCode=0x5) [0124.329] GetLastError () returned 0x5 [0124.329] SetLastError (dwErrCode=0x5) [0124.329] AreFileApisANSI () returned 1 [0124.329] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.329] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x48e218, cchWideChar=36 | out: lpWideCharStr="C:\\\\Boot\\cs-CZ\\CRYPTOID_MESSAGE.txt") returned 36 [0124.330] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\cs-cz\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.330] GetLastError () returned 0x5 [0124.330] GetLastError () returned 0x5 [0124.330] SetLastError (dwErrCode=0x5) [0124.330] GetLastError () returned 0x5 [0124.330] SetLastError (dwErrCode=0x5) [0124.330] GetLastError () returned 0x5 [0124.330] SetLastError (dwErrCode=0x5) [0124.330] GetLastError () returned 0x5 [0124.330] SetLastError (dwErrCode=0x5) [0124.330] FindFirstFileA (in: lpFileName="C:\\\\Boot\\cs-CZ\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.331] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.331] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.331] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.331] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.331] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.331] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.331] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.331] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.331] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.331] AreFileApisANSI () returned 1 [0124.331] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.331] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f420, cbMultiByte=-1, lpWideCharStr=0x48e218, cchWideChar=36 | out: lpWideCharStr="C:\\\\Boot\\da-DK\\CRYPTOID_BLOCKED.txt") returned 36 [0124.331] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\da-dk\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.344] GetLastError () returned 0x5 [0124.344] GetLastError () returned 0x5 [0124.344] SetLastError (dwErrCode=0x5) [0124.344] GetLastError () returned 0x5 [0124.344] SetLastError (dwErrCode=0x5) [0124.344] GetLastError () returned 0x5 [0124.344] SetLastError (dwErrCode=0x5) [0124.344] GetLastError () returned 0x5 [0124.344] SetLastError (dwErrCode=0x5) [0124.344] AreFileApisANSI () returned 1 [0124.344] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f308, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.344] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f308, cbMultiByte=-1, lpWideCharStr=0x48e218, cchWideChar=33 | out: lpWideCharStr="C:\\\\Boot\\da-DK\\CRYPTOID_HELP.txt") returned 33 [0124.344] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\da-dk\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.349] GetLastError () returned 0x5 [0124.349] GetLastError () returned 0x5 [0124.349] SetLastError (dwErrCode=0x5) [0124.350] GetLastError () returned 0x5 [0124.350] SetLastError (dwErrCode=0x5) [0124.350] GetLastError () returned 0x5 [0124.350] SetLastError (dwErrCode=0x5) [0124.350] GetLastError () returned 0x5 [0124.350] SetLastError (dwErrCode=0x5) [0124.350] AreFileApisANSI () returned 1 [0124.350] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f538, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.350] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f538, cbMultiByte=-1, lpWideCharStr=0x48e218, cchWideChar=36 | out: lpWideCharStr="C:\\\\Boot\\da-DK\\CRYPTOID_MESSAGE.txt") returned 36 [0124.350] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\da-dk\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.351] GetLastError () returned 0x5 [0124.351] GetLastError () returned 0x5 [0124.351] SetLastError (dwErrCode=0x5) [0124.351] GetLastError () returned 0x5 [0124.351] SetLastError (dwErrCode=0x5) [0124.351] GetLastError () returned 0x5 [0124.352] SetLastError (dwErrCode=0x5) [0124.352] GetLastError () returned 0x5 [0124.352] SetLastError (dwErrCode=0x5) [0124.352] FindFirstFileA (in: lpFileName="C:\\\\Boot\\da-DK\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.352] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.352] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.352] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.352] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.352] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.352] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.352] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.352] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.352] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.352] AreFileApisANSI () returned 1 [0124.352] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.352] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\de-de\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.358] GetLastError () returned 0x5 [0124.358] GetLastError () returned 0x5 [0124.358] SetLastError (dwErrCode=0x5) [0124.358] GetLastError () returned 0x5 [0124.358] SetLastError (dwErrCode=0x5) [0124.358] GetLastError () returned 0x5 [0124.358] SetLastError (dwErrCode=0x5) [0124.358] SetLastError (dwErrCode=0x5) [0124.358] AreFileApisANSI () returned 1 [0124.358] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f308, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.358] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\de-de\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.362] GetLastError () returned 0x5 [0124.362] GetLastError () returned 0x5 [0124.362] SetLastError (dwErrCode=0x5) [0124.362] GetLastError () returned 0x5 [0124.362] SetLastError (dwErrCode=0x5) [0124.362] GetLastError () returned 0x5 [0124.362] SetLastError (dwErrCode=0x5) [0124.362] SetLastError (dwErrCode=0x5) [0124.362] AreFileApisANSI () returned 1 [0124.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.362] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\de-de\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.368] GetLastError () returned 0x5 [0124.368] GetLastError () returned 0x5 [0124.368] SetLastError (dwErrCode=0x5) [0124.368] GetLastError () returned 0x5 [0124.368] SetLastError (dwErrCode=0x5) [0124.368] GetLastError () returned 0x5 [0124.368] SetLastError (dwErrCode=0x5) [0124.368] SetLastError (dwErrCode=0x5) [0124.368] FindFirstFileA (in: lpFileName="C:\\\\Boot\\de-DE\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.368] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.368] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.368] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.368] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.368] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.368] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.368] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.368] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.368] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.368] AreFileApisANSI () returned 1 [0124.368] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.368] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\el-gr\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.382] GetLastError () returned 0x5 [0124.382] GetLastError () returned 0x5 [0124.382] SetLastError (dwErrCode=0x5) [0124.382] GetLastError () returned 0x5 [0124.382] SetLastError (dwErrCode=0x5) [0124.382] GetLastError () returned 0x5 [0124.382] SetLastError (dwErrCode=0x5) [0124.382] SetLastError (dwErrCode=0x5) [0124.382] AreFileApisANSI () returned 1 [0124.382] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.382] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\el-gr\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.383] GetLastError () returned 0x5 [0124.383] GetLastError () returned 0x5 [0124.383] SetLastError (dwErrCode=0x5) [0124.383] GetLastError () returned 0x5 [0124.383] SetLastError (dwErrCode=0x5) [0124.383] GetLastError () returned 0x5 [0124.383] SetLastError (dwErrCode=0x5) [0124.383] SetLastError (dwErrCode=0x5) [0124.383] AreFileApisANSI () returned 1 [0124.383] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f4c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.383] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\el-gr\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.384] GetLastError () returned 0x5 [0124.384] GetLastError () returned 0x5 [0124.384] SetLastError (dwErrCode=0x5) [0124.384] GetLastError () returned 0x5 [0124.384] SetLastError (dwErrCode=0x5) [0124.384] GetLastError () returned 0x5 [0124.384] SetLastError (dwErrCode=0x5) [0124.384] SetLastError (dwErrCode=0x5) [0124.384] FindFirstFileA (in: lpFileName="C:\\\\Boot\\el-GR\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.384] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.384] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.384] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.384] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.384] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.384] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.384] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.384] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.384] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.384] AreFileApisANSI () returned 1 [0124.384] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.385] CreateFileW (lpFileName="C:\\\\Boot\\en-GB\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\en-gb\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.388] GetLastError () returned 0x5 [0124.388] GetLastError () returned 0x5 [0124.388] SetLastError (dwErrCode=0x5) [0124.388] GetLastError () returned 0x5 [0124.389] SetLastError (dwErrCode=0x5) [0124.389] GetLastError () returned 0x5 [0124.389] SetLastError (dwErrCode=0x5) [0124.389] SetLastError (dwErrCode=0x5) [0124.389] AreFileApisANSI () returned 1 [0124.389] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f378, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.389] CreateFileW (lpFileName="C:\\\\Boot\\en-GB\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\en-gb\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.390] GetLastError () returned 0x5 [0124.390] GetLastError () returned 0x5 [0124.390] SetLastError (dwErrCode=0x5) [0124.390] GetLastError () returned 0x5 [0124.390] SetLastError (dwErrCode=0x5) [0124.390] GetLastError () returned 0x5 [0124.390] SetLastError (dwErrCode=0x5) [0124.390] SetLastError (dwErrCode=0x5) [0124.390] AreFileApisANSI () returned 1 [0124.390] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.390] CreateFileW (lpFileName="C:\\\\Boot\\en-GB\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\en-gb\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.390] GetLastError () returned 0x5 [0124.390] GetLastError () returned 0x5 [0124.390] SetLastError (dwErrCode=0x5) [0124.390] GetLastError () returned 0x5 [0124.390] SetLastError (dwErrCode=0x5) [0124.390] GetLastError () returned 0x5 [0124.390] SetLastError (dwErrCode=0x5) [0124.390] SetLastError (dwErrCode=0x5) [0124.390] FindFirstFileA (in: lpFileName="C:\\\\Boot\\en-GB\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.391] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.391] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.391] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.391] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.391] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.391] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.391] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.391] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.391] AreFileApisANSI () returned 1 [0124.391] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f378, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.391] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\en-us\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.397] GetLastError () returned 0x5 [0124.397] GetLastError () returned 0x5 [0124.397] SetLastError (dwErrCode=0x5) [0124.397] GetLastError () returned 0x5 [0124.397] SetLastError (dwErrCode=0x5) [0124.398] GetLastError () returned 0x5 [0124.398] SetLastError (dwErrCode=0x5) [0124.398] SetLastError (dwErrCode=0x5) [0124.398] AreFileApisANSI () returned 1 [0124.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f538, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.398] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\en-us\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.398] GetLastError () returned 0x5 [0124.398] GetLastError () returned 0x5 [0124.398] SetLastError (dwErrCode=0x5) [0124.398] GetLastError () returned 0x5 [0124.398] SetLastError (dwErrCode=0x5) [0124.398] GetLastError () returned 0x5 [0124.398] SetLastError (dwErrCode=0x5) [0124.398] SetLastError (dwErrCode=0x5) [0124.398] AreFileApisANSI () returned 1 [0124.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.398] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\en-us\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.399] GetLastError () returned 0x5 [0124.399] GetLastError () returned 0x5 [0124.399] SetLastError (dwErrCode=0x5) [0124.399] GetLastError () returned 0x5 [0124.399] SetLastError (dwErrCode=0x5) [0124.399] GetLastError () returned 0x5 [0124.399] SetLastError (dwErrCode=0x5) [0124.399] SetLastError (dwErrCode=0x5) [0124.399] FindFirstFileA (in: lpFileName="C:\\\\Boot\\en-US\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.399] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.399] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.399] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.399] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.399] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.399] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.399] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.399] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.399] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.399] AreFileApisANSI () returned 1 [0124.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f378, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.400] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\es-es\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.403] GetLastError () returned 0x5 [0124.403] GetLastError () returned 0x5 [0124.403] SetLastError (dwErrCode=0x5) [0124.403] GetLastError () returned 0x5 [0124.403] SetLastError (dwErrCode=0x5) [0124.403] GetLastError () returned 0x5 [0124.403] SetLastError (dwErrCode=0x5) [0124.404] SetLastError (dwErrCode=0x5) [0124.404] AreFileApisANSI () returned 1 [0124.404] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.404] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\es-es\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.404] GetLastError () returned 0x5 [0124.404] GetLastError () returned 0x5 [0124.404] SetLastError (dwErrCode=0x5) [0124.404] GetLastError () returned 0x5 [0124.404] SetLastError (dwErrCode=0x5) [0124.404] GetLastError () returned 0x5 [0124.404] SetLastError (dwErrCode=0x5) [0124.404] SetLastError (dwErrCode=0x5) [0124.404] AreFileApisANSI () returned 1 [0124.404] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.405] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\es-es\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.405] GetLastError () returned 0x5 [0124.405] GetLastError () returned 0x5 [0124.405] SetLastError (dwErrCode=0x5) [0124.405] GetLastError () returned 0x5 [0124.405] SetLastError (dwErrCode=0x5) [0124.405] GetLastError () returned 0x5 [0124.405] SetLastError (dwErrCode=0x5) [0124.405] SetLastError (dwErrCode=0x5) [0124.405] FindFirstFileA (in: lpFileName="C:\\\\Boot\\es-ES\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.405] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.405] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.405] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.405] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.405] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.405] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.405] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.405] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.405] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.405] AreFileApisANSI () returned 1 [0124.405] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f688, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.405] CreateFileW (lpFileName="C:\\\\Boot\\es-MX\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\es-mx\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.410] GetLastError () returned 0x5 [0124.410] GetLastError () returned 0x5 [0124.410] SetLastError (dwErrCode=0x5) [0124.410] GetLastError () returned 0x5 [0124.410] SetLastError (dwErrCode=0x5) [0124.410] GetLastError () returned 0x5 [0124.410] SetLastError (dwErrCode=0x5) [0124.410] SetLastError (dwErrCode=0x5) [0124.410] AreFileApisANSI () returned 1 [0124.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f650, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.410] CreateFileW (lpFileName="C:\\\\Boot\\es-MX\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\es-mx\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.414] GetLastError () returned 0x5 [0124.414] GetLastError () returned 0x5 [0124.414] SetLastError (dwErrCode=0x5) [0124.414] GetLastError () returned 0x5 [0124.414] SetLastError (dwErrCode=0x5) [0124.414] GetLastError () returned 0x5 [0124.414] SetLastError (dwErrCode=0x5) [0124.415] SetLastError (dwErrCode=0x5) [0124.415] AreFileApisANSI () returned 1 [0124.415] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.415] CreateFileW (lpFileName="C:\\\\Boot\\es-MX\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\es-mx\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.416] GetLastError () returned 0x5 [0124.416] GetLastError () returned 0x5 [0124.416] SetLastError (dwErrCode=0x5) [0124.416] GetLastError () returned 0x5 [0124.416] SetLastError (dwErrCode=0x5) [0124.416] GetLastError () returned 0x5 [0124.416] SetLastError (dwErrCode=0x5) [0124.416] SetLastError (dwErrCode=0x5) [0124.416] FindFirstFileA (in: lpFileName="C:\\\\Boot\\es-MX\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.416] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.416] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.416] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.416] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.416] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.416] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.417] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.417] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.417] AreFileApisANSI () returned 1 [0124.417] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.417] CreateFileW (lpFileName="C:\\\\Boot\\et-EE\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\et-ee\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.420] GetLastError () returned 0x5 [0124.420] GetLastError () returned 0x5 [0124.420] SetLastError (dwErrCode=0x5) [0124.420] GetLastError () returned 0x5 [0124.420] SetLastError (dwErrCode=0x5) [0124.420] GetLastError () returned 0x5 [0124.420] SetLastError (dwErrCode=0x5) [0124.420] SetLastError (dwErrCode=0x5) [0124.420] AreFileApisANSI () returned 1 [0124.420] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.420] CreateFileW (lpFileName="C:\\\\Boot\\et-EE\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\et-ee\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.421] GetLastError () returned 0x5 [0124.421] GetLastError () returned 0x5 [0124.421] SetLastError (dwErrCode=0x5) [0124.421] GetLastError () returned 0x5 [0124.421] SetLastError (dwErrCode=0x5) [0124.421] GetLastError () returned 0x5 [0124.421] SetLastError (dwErrCode=0x5) [0124.421] SetLastError (dwErrCode=0x5) [0124.421] AreFileApisANSI () returned 1 [0124.421] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.421] CreateFileW (lpFileName="C:\\\\Boot\\et-EE\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\et-ee\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.422] GetLastError () returned 0x5 [0124.422] GetLastError () returned 0x5 [0124.422] SetLastError (dwErrCode=0x5) [0124.422] GetLastError () returned 0x5 [0124.422] SetLastError (dwErrCode=0x5) [0124.422] GetLastError () returned 0x5 [0124.422] SetLastError (dwErrCode=0x5) [0124.422] SetLastError (dwErrCode=0x5) [0124.422] FindFirstFileA (in: lpFileName="C:\\\\Boot\\et-EE\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.422] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.422] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.422] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.422] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.422] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.422] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.422] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.422] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.422] AreFileApisANSI () returned 1 [0124.422] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.422] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\fi-fi\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.427] GetLastError () returned 0x5 [0124.427] GetLastError () returned 0x5 [0124.427] SetLastError (dwErrCode=0x5) [0124.427] GetLastError () returned 0x5 [0124.427] SetLastError (dwErrCode=0x5) [0124.427] GetLastError () returned 0x5 [0124.427] SetLastError (dwErrCode=0x5) [0124.427] SetLastError (dwErrCode=0x5) [0124.427] AreFileApisANSI () returned 1 [0124.427] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.427] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\fi-fi\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.428] GetLastError () returned 0x5 [0124.428] GetLastError () returned 0x5 [0124.428] SetLastError (dwErrCode=0x5) [0124.428] GetLastError () returned 0x5 [0124.428] SetLastError (dwErrCode=0x5) [0124.428] GetLastError () returned 0x5 [0124.428] SetLastError (dwErrCode=0x5) [0124.428] SetLastError (dwErrCode=0x5) [0124.428] AreFileApisANSI () returned 1 [0124.428] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.428] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\fi-fi\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.429] GetLastError () returned 0x5 [0124.429] GetLastError () returned 0x5 [0124.429] SetLastError (dwErrCode=0x5) [0124.429] GetLastError () returned 0x5 [0124.429] SetLastError (dwErrCode=0x5) [0124.429] GetLastError () returned 0x5 [0124.429] SetLastError (dwErrCode=0x5) [0124.429] SetLastError (dwErrCode=0x5) [0124.429] FindFirstFileA (in: lpFileName="C:\\\\Boot\\fi-FI\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.429] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.429] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.429] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.429] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.429] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.429] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.429] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.429] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.429] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.429] AreFileApisANSI () returned 1 [0124.429] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.429] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\fonts\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.433] GetLastError () returned 0x5 [0124.433] GetLastError () returned 0x5 [0124.433] SetLastError (dwErrCode=0x5) [0124.433] GetLastError () returned 0x5 [0124.433] SetLastError (dwErrCode=0x5) [0124.433] GetLastError () returned 0x5 [0124.433] SetLastError (dwErrCode=0x5) [0124.433] SetLastError (dwErrCode=0x5) [0124.433] AreFileApisANSI () returned 1 [0124.434] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f308, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.434] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\fonts\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.434] GetLastError () returned 0x5 [0124.434] GetLastError () returned 0x5 [0124.434] SetLastError (dwErrCode=0x5) [0124.434] GetLastError () returned 0x5 [0124.434] SetLastError (dwErrCode=0x5) [0124.434] GetLastError () returned 0x5 [0124.434] SetLastError (dwErrCode=0x5) [0124.434] SetLastError (dwErrCode=0x5) [0124.434] AreFileApisANSI () returned 1 [0124.434] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.435] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\fonts\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.435] GetLastError () returned 0x5 [0124.435] GetLastError () returned 0x5 [0124.435] SetLastError (dwErrCode=0x5) [0124.435] GetLastError () returned 0x5 [0124.435] SetLastError (dwErrCode=0x5) [0124.435] GetLastError () returned 0x5 [0124.435] SetLastError (dwErrCode=0x5) [0124.435] SetLastError (dwErrCode=0x5) [0124.435] FindFirstFileA (in: lpFileName="C:\\\\Boot\\Fonts\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.435] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.435] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.435] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.435] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.435] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.435] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.435] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.435] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.435] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.435] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.435] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.435] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.435] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.436] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.436] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.436] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.436] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.436] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.436] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.436] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.436] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.436] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.436] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.436] AreFileApisANSI () returned 1 [0124.436] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.436] CreateFileW (lpFileName="C:\\\\Boot\\fr-CA\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\fr-ca\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.440] GetLastError () returned 0x5 [0124.440] GetLastError () returned 0x5 [0124.440] SetLastError (dwErrCode=0x5) [0124.440] GetLastError () returned 0x5 [0124.440] SetLastError (dwErrCode=0x5) [0124.440] GetLastError () returned 0x5 [0124.440] SetLastError (dwErrCode=0x5) [0124.440] SetLastError (dwErrCode=0x5) [0124.440] AreFileApisANSI () returned 1 [0124.440] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f650, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.440] CreateFileW (lpFileName="C:\\\\Boot\\fr-CA\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\fr-ca\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.440] GetLastError () returned 0x5 [0124.440] GetLastError () returned 0x5 [0124.440] SetLastError (dwErrCode=0x5) [0124.440] GetLastError () returned 0x5 [0124.440] SetLastError (dwErrCode=0x5) [0124.440] GetLastError () returned 0x5 [0124.441] SetLastError (dwErrCode=0x5) [0124.441] SetLastError (dwErrCode=0x5) [0124.441] AreFileApisANSI () returned 1 [0124.441] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.441] CreateFileW (lpFileName="C:\\\\Boot\\fr-CA\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\fr-ca\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.441] GetLastError () returned 0x5 [0124.441] GetLastError () returned 0x5 [0124.441] SetLastError (dwErrCode=0x5) [0124.441] GetLastError () returned 0x5 [0124.441] SetLastError (dwErrCode=0x5) [0124.441] GetLastError () returned 0x5 [0124.441] SetLastError (dwErrCode=0x5) [0124.442] SetLastError (dwErrCode=0x5) [0124.442] FindFirstFileA (in: lpFileName="C:\\\\Boot\\fr-CA\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.442] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.442] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.442] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.442] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.442] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.442] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.442] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.442] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.442] AreFileApisANSI () returned 1 [0124.442] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.442] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\fr-fr\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.446] GetLastError () returned 0x5 [0124.446] GetLastError () returned 0x5 [0124.447] SetLastError (dwErrCode=0x5) [0124.447] GetLastError () returned 0x5 [0124.447] SetLastError (dwErrCode=0x5) [0124.447] GetLastError () returned 0x5 [0124.447] SetLastError (dwErrCode=0x5) [0124.447] SetLastError (dwErrCode=0x5) [0124.447] AreFileApisANSI () returned 1 [0124.447] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f650, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.447] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\fr-fr\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.447] GetLastError () returned 0x5 [0124.447] GetLastError () returned 0x5 [0124.447] SetLastError (dwErrCode=0x5) [0124.447] GetLastError () returned 0x5 [0124.447] SetLastError (dwErrCode=0x5) [0124.447] GetLastError () returned 0x5 [0124.447] SetLastError (dwErrCode=0x5) [0124.447] SetLastError (dwErrCode=0x5) [0124.447] AreFileApisANSI () returned 1 [0124.447] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f538, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.447] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\fr-fr\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.448] GetLastError () returned 0x5 [0124.448] GetLastError () returned 0x5 [0124.448] FindFirstFileA (in: lpFileName="C:\\\\Boot\\fr-FR\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.448] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.448] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.448] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.448] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.448] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.448] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.448] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.448] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.448] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.448] AreFileApisANSI () returned 1 [0124.449] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.449] CreateFileW (lpFileName="C:\\\\Boot\\hr-HR\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\hr-hr\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.453] GetLastError () returned 0x5 [0124.453] GetLastError () returned 0x5 [0124.453] AreFileApisANSI () returned 1 [0124.453] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.453] CreateFileW (lpFileName="C:\\\\Boot\\hr-HR\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\hr-hr\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.454] GetLastError () returned 0x5 [0124.454] GetLastError () returned 0x5 [0124.454] AreFileApisANSI () returned 1 [0124.454] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.454] CreateFileW (lpFileName="C:\\\\Boot\\hr-HR\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\hr-hr\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.454] GetLastError () returned 0x5 [0124.454] GetLastError () returned 0x5 [0124.454] FindFirstFileA (in: lpFileName="C:\\\\Boot\\hr-HR\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.454] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.454] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.454] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.454] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.454] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.454] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.454] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.454] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.454] AreFileApisANSI () returned 1 [0124.454] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.455] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\hu-hu\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.459] GetLastError () returned 0x5 [0124.459] GetLastError () returned 0x5 [0124.459] AreFileApisANSI () returned 1 [0124.459] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.459] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\hu-hu\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.459] GetLastError () returned 0x5 [0124.459] GetLastError () returned 0x5 [0124.459] AreFileApisANSI () returned 1 [0124.459] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f650, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.459] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\hu-hu\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.460] GetLastError () returned 0x5 [0124.460] GetLastError () returned 0x5 [0124.460] FindFirstFileA (in: lpFileName="C:\\\\Boot\\hu-HU\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.460] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.460] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.460] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.460] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.460] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.460] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.460] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.460] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.460] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.460] AreFileApisANSI () returned 1 [0124.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.460] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\it-it\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.464] GetLastError () returned 0x5 [0124.464] GetLastError () returned 0x5 [0124.464] AreFileApisANSI () returned 1 [0124.464] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f308, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.464] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\it-it\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.465] GetLastError () returned 0x5 [0124.465] GetLastError () returned 0x5 [0124.465] AreFileApisANSI () returned 1 [0124.465] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f538, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.465] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\it-it\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.466] GetLastError () returned 0x5 [0124.466] GetLastError () returned 0x5 [0124.466] FindFirstFileA (in: lpFileName="C:\\\\Boot\\it-IT\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.466] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.466] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.466] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.466] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.466] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.466] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.466] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.466] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.466] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.466] AreFileApisANSI () returned 1 [0124.466] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.466] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\ja-jp\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.471] GetLastError () returned 0x5 [0124.471] GetLastError () returned 0x5 [0124.471] AreFileApisANSI () returned 1 [0124.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f4c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.471] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\ja-jp\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.471] GetLastError () returned 0x5 [0124.471] GetLastError () returned 0x5 [0124.471] AreFileApisANSI () returned 1 [0124.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f570, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.471] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\ja-jp\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.472] GetLastError () returned 0x5 [0124.472] GetLastError () returned 0x5 [0124.472] FindFirstFileA (in: lpFileName="C:\\\\Boot\\ja-JP\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.472] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.472] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.472] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.472] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.472] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.472] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.472] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.472] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.472] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.472] AreFileApisANSI () returned 1 [0124.472] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f650, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.472] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\ko-kr\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.478] GetLastError () returned 0x5 [0124.478] GetLastError () returned 0x5 [0124.478] AreFileApisANSI () returned 1 [0124.478] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f308, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.478] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\ko-kr\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.479] GetLastError () returned 0x5 [0124.479] GetLastError () returned 0x5 [0124.479] AreFileApisANSI () returned 1 [0124.479] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.479] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\ko-kr\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.480] GetLastError () returned 0x5 [0124.480] GetLastError () returned 0x5 [0124.480] FindFirstFileA (in: lpFileName="C:\\\\Boot\\ko-KR\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.480] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.480] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.480] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.480] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.480] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.480] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.480] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.480] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.481] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.481] AreFileApisANSI () returned 1 [0124.481] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.481] CreateFileW (lpFileName="C:\\\\Boot\\lt-LT\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\lt-lt\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.485] GetLastError () returned 0x5 [0124.485] GetLastError () returned 0x5 [0124.485] AreFileApisANSI () returned 1 [0124.485] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.485] CreateFileW (lpFileName="C:\\\\Boot\\lt-LT\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\lt-lt\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.485] GetLastError () returned 0x5 [0124.485] GetLastError () returned 0x5 [0124.485] AreFileApisANSI () returned 1 [0124.485] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.485] CreateFileW (lpFileName="C:\\\\Boot\\lt-LT\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\lt-lt\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.486] GetLastError () returned 0x5 [0124.486] GetLastError () returned 0x5 [0124.486] FindFirstFileA (in: lpFileName="C:\\\\Boot\\lt-LT\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.486] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.486] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.486] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.486] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.486] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.486] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.486] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.486] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.486] AreFileApisANSI () returned 1 [0124.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f570, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.486] CreateFileW (lpFileName="C:\\\\Boot\\lv-LV\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\lv-lv\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.499] GetLastError () returned 0x5 [0124.499] GetLastError () returned 0x5 [0124.499] AreFileApisANSI () returned 1 [0124.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.499] CreateFileW (lpFileName="C:\\\\Boot\\lv-LV\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\lv-lv\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.499] GetLastError () returned 0x5 [0124.499] GetLastError () returned 0x5 [0124.499] AreFileApisANSI () returned 1 [0124.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.499] CreateFileW (lpFileName="C:\\\\Boot\\lv-LV\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\lv-lv\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.499] GetLastError () returned 0x5 [0124.499] GetLastError () returned 0x5 [0124.499] FindFirstFileA (in: lpFileName="C:\\\\Boot\\lv-LV\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.500] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.500] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.500] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.500] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.500] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.500] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.500] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.500] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.500] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.500] AreFileApisANSI () returned 1 [0124.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.500] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\nb-no\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.504] GetLastError () returned 0x5 [0124.504] GetLastError () returned 0x5 [0124.504] AreFileApisANSI () returned 1 [0124.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f308, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.504] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\nb-no\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.504] GetLastError () returned 0x5 [0124.504] GetLastError () returned 0x5 [0124.504] AreFileApisANSI () returned 1 [0124.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f378, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.504] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\nb-no\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.505] GetLastError () returned 0x5 [0124.505] GetLastError () returned 0x5 [0124.505] FindFirstFileA (in: lpFileName="C:\\\\Boot\\nb-NO\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.505] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.505] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.505] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.505] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.505] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.505] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.505] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.505] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.505] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.505] AreFileApisANSI () returned 1 [0124.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f688, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.505] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\nl-nl\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.509] GetLastError () returned 0x5 [0124.509] GetLastError () returned 0x5 [0124.509] AreFileApisANSI () returned 1 [0124.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.509] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\nl-nl\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.510] GetLastError () returned 0x5 [0124.510] GetLastError () returned 0x5 [0124.510] AreFileApisANSI () returned 1 [0124.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.510] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\nl-nl\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.510] GetLastError () returned 0x5 [0124.510] GetLastError () returned 0x5 [0124.510] FindFirstFileA (in: lpFileName="C:\\\\Boot\\nl-NL\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.510] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.511] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.511] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.511] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.511] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.511] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.511] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.511] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.511] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.511] AreFileApisANSI () returned 1 [0124.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.511] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\pl-pl\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.515] GetLastError () returned 0x5 [0124.515] GetLastError () returned 0x5 [0124.515] AreFileApisANSI () returned 1 [0124.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.515] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\pl-pl\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.515] GetLastError () returned 0x5 [0124.515] GetLastError () returned 0x5 [0124.515] AreFileApisANSI () returned 1 [0124.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.516] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\pl-pl\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.516] GetLastError () returned 0x5 [0124.516] GetLastError () returned 0x5 [0124.516] FindFirstFileA (in: lpFileName="C:\\\\Boot\\pl-PL\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.516] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.516] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.516] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.516] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.516] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.516] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.516] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.516] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.517] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.517] AreFileApisANSI () returned 1 [0124.517] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.517] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\pt-br\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.521] GetLastError () returned 0x5 [0124.521] GetLastError () returned 0x5 [0124.521] AreFileApisANSI () returned 1 [0124.521] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f308, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.521] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\pt-br\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.522] GetLastError () returned 0x5 [0124.522] GetLastError () returned 0x5 [0124.522] AreFileApisANSI () returned 1 [0124.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.522] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\pt-br\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.522] GetLastError () returned 0x5 [0124.522] GetLastError () returned 0x5 [0124.522] FindFirstFileA (in: lpFileName="C:\\\\Boot\\pt-BR\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.522] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.522] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.522] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.522] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.522] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.522] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.522] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.522] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.522] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.522] AreFileApisANSI () returned 1 [0124.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.522] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\pt-pt\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.526] GetLastError () returned 0x5 [0124.526] GetLastError () returned 0x5 [0124.526] AreFileApisANSI () returned 1 [0124.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.526] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\pt-pt\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.527] GetLastError () returned 0x5 [0124.527] GetLastError () returned 0x5 [0124.527] AreFileApisANSI () returned 1 [0124.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.527] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\pt-pt\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.527] GetLastError () returned 0x5 [0124.527] GetLastError () returned 0x5 [0124.527] FindFirstFileA (in: lpFileName="C:\\\\Boot\\pt-PT\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.528] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.528] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.528] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.528] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.528] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.528] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.528] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.528] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.528] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.528] AreFileApisANSI () returned 1 [0124.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 39 [0124.528] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\qps-ploc\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.532] GetLastError () returned 0x5 [0124.532] GetLastError () returned 0x5 [0124.532] AreFileApisANSI () returned 1 [0124.532] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.532] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\qps-ploc\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.532] GetLastError () returned 0x5 [0124.532] GetLastError () returned 0x5 [0124.533] AreFileApisANSI () returned 1 [0124.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 39 [0124.533] CreateFileW (lpFileName="C:\\\\Boot\\qps-ploc\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\qps-ploc\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.533] GetLastError () returned 0x5 [0124.533] GetLastError () returned 0x5 [0124.533] FindFirstFileA (in: lpFileName="C:\\\\Boot\\qps-ploc\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.533] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.533] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.533] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.533] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.533] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.533] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.533] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.533] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.533] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.533] AreFileApisANSI () returned 1 [0124.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f308, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 40 [0124.533] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\resources\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.538] GetLastError () returned 0x5 [0124.538] GetLastError () returned 0x5 [0124.538] AreFileApisANSI () returned 1 [0124.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 37 [0124.538] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\resources\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.539] GetLastError () returned 0x5 [0124.539] GetLastError () returned 0x5 [0124.539] AreFileApisANSI () returned 1 [0124.539] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 40 [0124.539] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\resources\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.540] GetLastError () returned 0x5 [0124.540] GetLastError () returned 0x5 [0124.540] FindFirstFileA (in: lpFileName="C:\\\\Boot\\Resources\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.540] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.540] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.540] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.540] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.540] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.540] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.540] AreFileApisANSI () returned 1 [0124.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0124.540] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\en-US\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\resources\\en-us\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dcfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.546] GetLastError () returned 0x5 [0124.546] GetLastError () returned 0x5 [0124.546] AreFileApisANSI () returned 1 [0124.546] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0124.546] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\en-US\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\resources\\en-us\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dcfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.546] GetLastError () returned 0x5 [0124.546] GetLastError () returned 0x5 [0124.546] AreFileApisANSI () returned 1 [0124.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0124.547] CreateFileW (lpFileName="C:\\\\Boot\\Resources\\en-US\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\resources\\en-us\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dcfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.547] GetLastError () returned 0x5 [0124.547] GetLastError () returned 0x5 [0124.547] FindFirstFileA (in: lpFileName="C:\\\\Boot\\Resources\\en-US\\*", lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 0x48f230 [0124.547] FindNextFileA (in: hFindFile=0x48f230, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0124.548] FindNextFileA (in: hFindFile=0x48f230, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0124.548] FindNextFileA (in: hFindFile=0x48f230, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0124.548] FindNextFileA (in: hFindFile=0x48f230, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0124.548] FindNextFileA (in: hFindFile=0x48f230, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0124.548] FindNextFileA (in: hFindFile=0x48f230, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 0 [0124.548] FindClose (in: hFindFile=0x48f230 | out: hFindFile=0x48f230) returned 1 [0124.548] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.548] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.548] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.548] AreFileApisANSI () returned 1 [0124.548] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.548] CreateFileW (lpFileName="C:\\\\Boot\\ro-RO\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\ro-ro\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.552] GetLastError () returned 0x5 [0124.552] GetLastError () returned 0x5 [0124.552] AreFileApisANSI () returned 1 [0124.552] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f650, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.552] CreateFileW (lpFileName="C:\\\\Boot\\ro-RO\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\ro-ro\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.553] GetLastError () returned 0x5 [0124.553] GetLastError () returned 0x5 [0124.553] AreFileApisANSI () returned 1 [0124.553] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.553] CreateFileW (lpFileName="C:\\\\Boot\\ro-RO\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\ro-ro\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.553] GetLastError () returned 0x5 [0124.553] GetLastError () returned 0x5 [0124.553] FindFirstFileA (in: lpFileName="C:\\\\Boot\\ro-RO\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.553] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.553] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.553] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.553] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.553] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.553] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.553] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.554] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.554] AreFileApisANSI () returned 1 [0124.554] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f688, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.554] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\ru-ru\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.557] GetLastError () returned 0x5 [0124.557] GetLastError () returned 0x5 [0124.557] AreFileApisANSI () returned 1 [0124.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.557] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\ru-ru\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.557] GetLastError () returned 0x5 [0124.557] GetLastError () returned 0x5 [0124.557] AreFileApisANSI () returned 1 [0124.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f688, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.557] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\ru-ru\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.558] GetLastError () returned 0x5 [0124.558] GetLastError () returned 0x5 [0124.558] FindFirstFileA (in: lpFileName="C:\\\\Boot\\ru-RU\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.558] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.558] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.558] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.558] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.558] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.558] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.558] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.558] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.558] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.558] AreFileApisANSI () returned 1 [0124.558] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.559] CreateFileW (lpFileName="C:\\\\Boot\\sk-SK\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\sk-sk\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.562] GetLastError () returned 0x5 [0124.562] GetLastError () returned 0x5 [0124.562] AreFileApisANSI () returned 1 [0124.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.563] CreateFileW (lpFileName="C:\\\\Boot\\sk-SK\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\sk-sk\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.563] GetLastError () returned 0x5 [0124.563] GetLastError () returned 0x5 [0124.563] AreFileApisANSI () returned 1 [0124.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.563] CreateFileW (lpFileName="C:\\\\Boot\\sk-SK\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\sk-sk\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.563] GetLastError () returned 0x5 [0124.563] GetLastError () returned 0x5 [0124.563] FindFirstFileA (in: lpFileName="C:\\\\Boot\\sk-SK\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.563] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.563] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.563] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.563] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.563] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.563] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.563] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.563] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.564] AreFileApisANSI () returned 1 [0124.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f4c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.564] CreateFileW (lpFileName="C:\\\\Boot\\sl-SI\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\sl-si\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.568] GetLastError () returned 0x5 [0124.568] GetLastError () returned 0x5 [0124.568] AreFileApisANSI () returned 1 [0124.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f308, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.568] CreateFileW (lpFileName="C:\\\\Boot\\sl-SI\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\sl-si\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.569] GetLastError () returned 0x5 [0124.569] GetLastError () returned 0x5 [0124.569] AreFileApisANSI () returned 1 [0124.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.569] CreateFileW (lpFileName="C:\\\\Boot\\sl-SI\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\sl-si\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.569] GetLastError () returned 0x5 [0124.569] GetLastError () returned 0x5 [0124.569] FindFirstFileA (in: lpFileName="C:\\\\Boot\\sl-SI\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.569] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.569] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.569] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.569] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.569] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.569] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.569] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.569] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.569] AreFileApisANSI () returned 1 [0124.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f378, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0124.569] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\sr-latn-cs\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.573] GetLastError () returned 0x5 [0124.573] GetLastError () returned 0x5 [0124.573] AreFileApisANSI () returned 1 [0124.573] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0124.573] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\sr-latn-cs\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.574] GetLastError () returned 0x5 [0124.574] GetLastError () returned 0x5 [0124.574] AreFileApisANSI () returned 1 [0124.574] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0124.574] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-CS\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\sr-latn-cs\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.574] GetLastError () returned 0x5 [0124.574] GetLastError () returned 0x5 [0124.574] FindFirstFileA (in: lpFileName="C:\\\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.574] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.574] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.574] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.574] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.574] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.574] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.574] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.574] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.574] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.574] AreFileApisANSI () returned 1 [0124.574] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0124.574] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-RS\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\sr-latn-rs\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.579] GetLastError () returned 0x5 [0124.579] GetLastError () returned 0x5 [0124.579] AreFileApisANSI () returned 1 [0124.579] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0124.579] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-RS\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\sr-latn-rs\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.580] GetLastError () returned 0x5 [0124.580] GetLastError () returned 0x5 [0124.580] AreFileApisANSI () returned 1 [0124.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f378, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0124.580] CreateFileW (lpFileName="C:\\\\Boot\\sr-Latn-RS\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\sr-latn-rs\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.580] GetLastError () returned 0x5 [0124.580] GetLastError () returned 0x5 [0124.580] FindFirstFileA (in: lpFileName="C:\\\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.580] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.580] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.580] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.580] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.581] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.581] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.581] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.581] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.581] AreFileApisANSI () returned 1 [0124.581] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.581] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\sv-se\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.585] GetLastError () returned 0x5 [0124.585] GetLastError () returned 0x5 [0124.585] AreFileApisANSI () returned 1 [0124.585] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.585] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\sv-se\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.586] GetLastError () returned 0x5 [0124.586] GetLastError () returned 0x5 [0124.586] AreFileApisANSI () returned 1 [0124.586] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.586] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\sv-se\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.586] GetLastError () returned 0x5 [0124.586] GetLastError () returned 0x5 [0124.586] FindFirstFileA (in: lpFileName="C:\\\\Boot\\sv-SE\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.586] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.586] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.586] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.586] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.586] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.586] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.586] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.586] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.586] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.586] AreFileApisANSI () returned 1 [0124.586] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f570, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.586] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\tr-tr\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.591] GetLastError () returned 0x5 [0124.591] GetLastError () returned 0x5 [0124.591] AreFileApisANSI () returned 1 [0124.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.591] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\tr-tr\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.591] GetLastError () returned 0x5 [0124.591] GetLastError () returned 0x5 [0124.591] AreFileApisANSI () returned 1 [0124.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.591] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\tr-tr\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.592] GetLastError () returned 0x5 [0124.592] GetLastError () returned 0x5 [0124.592] FindFirstFileA (in: lpFileName="C:\\\\Boot\\tr-TR\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.592] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.592] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.592] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.592] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.592] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.592] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.592] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.592] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.592] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.592] AreFileApisANSI () returned 1 [0124.592] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.592] CreateFileW (lpFileName="C:\\\\Boot\\uk-UA\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\uk-ua\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.599] GetLastError () returned 0x5 [0124.599] GetLastError () returned 0x5 [0124.599] AreFileApisANSI () returned 1 [0124.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.599] CreateFileW (lpFileName="C:\\\\Boot\\uk-UA\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\uk-ua\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.600] GetLastError () returned 0x5 [0124.600] GetLastError () returned 0x5 [0124.600] AreFileApisANSI () returned 1 [0124.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f4c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.600] CreateFileW (lpFileName="C:\\\\Boot\\uk-UA\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\uk-ua\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.604] GetLastError () returned 0x5 [0124.604] GetLastError () returned 0x5 [0124.604] FindFirstFileA (in: lpFileName="C:\\\\Boot\\uk-UA\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.604] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.604] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.604] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.604] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.604] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.604] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.604] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.604] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.604] AreFileApisANSI () returned 1 [0124.604] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f650, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.604] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\zh-cn\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.610] GetLastError () returned 0x5 [0124.610] GetLastError () returned 0x5 [0124.610] AreFileApisANSI () returned 1 [0124.610] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.610] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\zh-cn\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.611] GetLastError () returned 0x5 [0124.611] GetLastError () returned 0x5 [0124.611] AreFileApisANSI () returned 1 [0124.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.611] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\zh-cn\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.611] GetLastError () returned 0x5 [0124.611] GetLastError () returned 0x5 [0124.611] FindFirstFileA (in: lpFileName="C:\\\\Boot\\zh-CN\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.611] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.611] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.611] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.612] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.612] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.612] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.612] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.612] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.612] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.612] AreFileApisANSI () returned 1 [0124.612] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.612] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\zh-hk\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.616] GetLastError () returned 0x5 [0124.616] GetLastError () returned 0x5 [0124.616] AreFileApisANSI () returned 1 [0124.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f4c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.616] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\zh-hk\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.617] GetLastError () returned 0x5 [0124.617] GetLastError () returned 0x5 [0124.617] AreFileApisANSI () returned 1 [0124.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.617] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\zh-hk\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.617] GetLastError () returned 0x5 [0124.617] GetLastError () returned 0x5 [0124.617] FindFirstFileA (in: lpFileName="C:\\\\Boot\\zh-HK\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.617] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.617] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.617] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.617] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.617] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.617] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.617] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.617] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.617] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.617] AreFileApisANSI () returned 1 [0124.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f538, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.617] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\boot\\zh-tw\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.622] GetLastError () returned 0x5 [0124.622] GetLastError () returned 0x5 [0124.622] AreFileApisANSI () returned 1 [0124.622] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.622] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\CRYPTOID_HELP.txt" (normalized: "c:\\boot\\zh-tw\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.622] GetLastError () returned 0x5 [0124.622] GetLastError () returned 0x5 [0124.622] AreFileApisANSI () returned 1 [0124.622] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.622] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\boot\\zh-tw\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.623] GetLastError () returned 0x5 [0124.623] GetLastError () returned 0x5 [0124.623] FindFirstFileA (in: lpFileName="C:\\\\Boot\\zh-TW\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e218 [0124.623] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.623] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.623] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.623] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.623] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.623] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.623] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0 [0124.623] FindClose (in: hFindFile=0x48e218 | out: hFindFile=0x48e218) returned 1 [0124.623] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 0 [0124.623] FindClose (in: hFindFile=0x48af10 | out: hFindFile=0x48af10) returned 1 [0124.623] FindNextFileA (in: hFindFile=0x48ed88, lpFindFileData=0x3def20 | out: lpFindFileData=0x3def20) returned 1 [0124.623] FindNextFileA (in: hFindFile=0x48ed88, lpFindFileData=0x3def20 | out: lpFindFileData=0x3def20) returned 1 [0124.623] FindNextFileA (in: hFindFile=0x48ed88, lpFindFileData=0x3def20 | out: lpFindFileData=0x3def20) returned 1 [0124.623] FindNextFileA (in: hFindFile=0x48ed88, lpFindFileData=0x3def20 | out: lpFindFileData=0x3def20) returned 1 [0124.623] AreFileApisANSI () returned 1 [0124.623] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.623] CreateFileW (lpFileName="C:\\\\Config.Msi\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\config.msi\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.628] GetLastError () returned 0x5 [0124.628] GetLastError () returned 0x5 [0124.628] AreFileApisANSI () returned 1 [0124.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0124.628] CreateFileW (lpFileName="C:\\\\Config.Msi\\CRYPTOID_HELP.txt" (normalized: "c:\\config.msi\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.628] GetLastError () returned 0x5 [0124.628] GetLastError () returned 0x5 [0124.628] AreFileApisANSI () returned 1 [0124.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.628] CreateFileW (lpFileName="C:\\\\Config.Msi\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\config.msi\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.629] GetLastError () returned 0x5 [0124.629] GetLastError () returned 0x5 [0124.629] FindFirstFileA (in: lpFileName="C:\\\\Config.Msi\\*", lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 0xffffffff [0124.629] FindNextFileA (in: hFindFile=0x48ed88, lpFindFileData=0x3def20 | out: lpFindFileData=0x3def20) returned 1 [0124.629] FindNextFileA (in: hFindFile=0x48ed88, lpFindFileData=0x3def20 | out: lpFindFileData=0x3def20) returned 1 [0124.629] FindNextFileA (in: hFindFile=0x48ed88, lpFindFileData=0x3def20 | out: lpFindFileData=0x3def20) returned 1 [0124.629] FindNextFileA (in: hFindFile=0x48ed88, lpFindFileData=0x3def20 | out: lpFindFileData=0x3def20) returned 1 [0124.629] AreFileApisANSI () returned 1 [0124.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f4c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0124.629] CreateFileW (lpFileName="C:\\\\Documents and Settings\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\documents and settings\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.630] GetLastError () returned 0x5 [0124.630] GetLastError () returned 0x5 [0124.631] AreFileApisANSI () returned 1 [0124.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0124.631] CreateFileW (lpFileName="C:\\\\Documents and Settings\\CRYPTOID_HELP.txt" (normalized: "c:\\documents and settings\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.631] GetLastError () returned 0x5 [0124.631] GetLastError () returned 0x5 [0124.631] AreFileApisANSI () returned 1 [0124.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0124.631] CreateFileW (lpFileName="C:\\\\Documents and Settings\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\documents and settings\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.632] GetLastError () returned 0x5 [0124.632] GetLastError () returned 0x5 [0124.632] FindFirstFileA (in: lpFileName="C:\\\\Documents and Settings\\*", lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 0xffffffff [0124.632] FindNextFileA (in: hFindFile=0x48ed88, lpFindFileData=0x3def20 | out: lpFindFileData=0x3def20) returned 1 [0124.632] FindNextFileA (in: hFindFile=0x48ed88, lpFindFileData=0x3def20 | out: lpFindFileData=0x3def20) returned 1 [0124.632] FindNextFileA (in: hFindFile=0x48ed88, lpFindFileData=0x3def20 | out: lpFindFileData=0x3def20) returned 1 [0124.632] AreFileApisANSI () returned 1 [0124.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 34 [0124.632] CreateFileW (lpFileName="C:\\\\PerfLogs\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\perflogs\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.636] GetLastError () returned 0x5 [0124.636] GetLastError () returned 0x5 [0124.636] AreFileApisANSI () returned 1 [0124.636] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x492790, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 31 [0124.636] CreateFileW (lpFileName="C:\\\\PerfLogs\\CRYPTOID_HELP.txt" (normalized: "c:\\perflogs\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.637] GetLastError () returned 0x5 [0124.637] GetLastError () returned 0x5 [0124.637] AreFileApisANSI () returned 1 [0124.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 34 [0124.637] CreateFileW (lpFileName="C:\\\\PerfLogs\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\perflogs\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.637] GetLastError () returned 0x5 [0124.637] GetLastError () returned 0x5 [0124.637] FindFirstFileA (in: lpFileName="C:\\\\PerfLogs\\*", lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 0xffffffff [0124.637] FindNextFileA (in: hFindFile=0x48ed88, lpFindFileData=0x3def20 | out: lpFindFileData=0x3def20) returned 1 [0124.637] AreFileApisANSI () returned 1 [0124.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 39 [0124.637] CreateFileW (lpFileName="C:\\\\Program Files\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.638] GetLastError () returned 0x5 [0124.638] GetLastError () returned 0x5 [0124.638] AreFileApisANSI () returned 1 [0124.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f538, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0124.638] CreateFileW (lpFileName="C:\\\\Program Files\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.639] GetLastError () returned 0x5 [0124.639] GetLastError () returned 0x5 [0124.639] AreFileApisANSI () returned 1 [0124.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 39 [0124.639] CreateFileW (lpFileName="C:\\\\Program Files\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3de294, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.639] GetLastError () returned 0x5 [0124.639] GetLastError () returned 0x5 [0124.639] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\*", lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 0x48af10 [0124.639] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.639] FindNextFileA (in: hFindFile=0x48af10, lpFindFileData=0x3de5c0 | out: lpFindFileData=0x3de5c0) returned 1 [0124.639] AreFileApisANSI () returned 1 [0124.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48e218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0124.639] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.640] GetLastError () returned 0x5 [0124.640] GetLastError () returned 0x5 [0124.640] AreFileApisANSI () returned 1 [0124.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48e218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0124.640] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.641] GetLastError () returned 0x5 [0124.641] GetLastError () returned 0x5 [0124.641] AreFileApisANSI () returned 1 [0124.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48e218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0124.641] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dd934, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.641] GetLastError () returned 0x5 [0124.641] GetLastError () returned 0x5 [0124.641] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\*", lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 0x48e268 [0124.641] FindNextFileA (in: hFindFile=0x48e268, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.641] FindNextFileA (in: hFindFile=0x48e268, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.642] FindNextFileA (in: hFindFile=0x48e268, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.642] FindNextFileA (in: hFindFile=0x48e268, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.642] FindNextFileA (in: hFindFile=0x48e268, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.642] AreFileApisANSI () returned 1 [0124.642] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48e218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0124.642] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\designer\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dcfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.646] GetLastError () returned 0x5 [0124.646] GetLastError () returned 0x5 [0124.646] AreFileApisANSI () returned 1 [0124.646] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48e218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0124.646] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\designer\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dcfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.646] GetLastError () returned 0x5 [0124.646] GetLastError () returned 0x5 [0124.646] AreFileApisANSI () returned 1 [0124.646] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48e218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0124.646] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\designer\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dcfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.647] GetLastError () returned 0x5 [0124.647] GetLastError () returned 0x5 [0124.647] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 0x48f290 [0124.647] FindNextFileA (in: hFindFile=0x48f290, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0124.647] FindNextFileA (in: hFindFile=0x48f290, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0124.647] FindNextFileA (in: hFindFile=0x48f290, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0124.647] FindNextFileA (in: hFindFile=0x48f290, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0124.647] FindNextFileA (in: hFindFile=0x48f290, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0124.647] FindNextFileA (in: hFindFile=0x48f290, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 0 [0124.647] FindClose (in: hFindFile=0x48f290 | out: hFindFile=0x48f290) returned 1 [0124.647] FindNextFileA (in: hFindFile=0x48e268, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0124.647] AreFileApisANSI () returned 1 [0124.647] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f230, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0124.647] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dcfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.648] GetLastError () returned 0x5 [0124.648] GetLastError () returned 0x5 [0124.648] AreFileApisANSI () returned 1 [0124.648] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f230, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0124.648] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dcfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.648] GetLastError () returned 0x5 [0124.648] GetLastError () returned 0x5 [0124.648] AreFileApisANSI () returned 1 [0124.648] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f230, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0124.648] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dcfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.649] GetLastError () returned 0x5 [0124.649] GetLastError () returned 0x5 [0124.649] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 0x48f2a0 [0124.649] FindNextFileA (in: hFindFile=0x48f2a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0124.649] FindNextFileA (in: hFindFile=0x48f2a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0124.649] AreFileApisANSI () returned 1 [0124.649] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f230, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0124.649] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.650] GetLastError () returned 0x5 [0124.650] GetLastError () returned 0x5 [0124.650] AreFileApisANSI () returned 1 [0124.650] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f230, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0124.650] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\CRYPTOID_HELP.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.650] GetLastError () returned 0x5 [0124.650] GetLastError () returned 0x5 [0124.650] AreFileApisANSI () returned 1 [0124.650] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f230, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0124.651] CreateFileW (lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.651] GetLastError () returned 0x5 [0124.651] GetLastError () returned 0x5 [0124.651] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x48e218 [0124.652] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0124.655] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0124.655] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0124.655] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0124.655] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0124.655] FindNextFileA (in: hFindFile=0x48e218, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0124.675] AreFileApisANSI () returned 1 [0124.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0124.681] GetLastError () returned 0x5 [0124.681] GetLastError () returned 0x5 [0124.681] AreFileApisANSI () returned 1 [0124.681] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ca8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0124.682] GetLastError () returned 0x5 [0124.682] GetLastError () returned 0x5 [0124.682] AreFileApisANSI () returned 1 [0124.682] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4982a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0124.682] GetLastError () returned 0x5 [0124.682] GetLastError () returned 0x5 [0124.683] AreFileApisANSI () returned 1 [0124.683] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48ae08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0124.687] GetLastError () returned 0x5 [0124.687] GetLastError () returned 0x5 [0124.687] AreFileApisANSI () returned 1 [0124.687] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48ae08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0124.687] GetLastError () returned 0x5 [0124.687] GetLastError () returned 0x5 [0124.687] AreFileApisANSI () returned 1 [0124.687] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48ae08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0124.688] GetLastError () returned 0x5 [0124.688] GetLastError () returned 0x5 [0124.688] AreFileApisANSI () returned 1 [0124.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0124.692] GetLastError () returned 0x5 [0124.692] GetLastError () returned 0x5 [0124.692] AreFileApisANSI () returned 1 [0124.692] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0124.693] AreFileApisANSI () returned 1 [0124.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0124.694] AreFileApisANSI () returned 1 [0124.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.697] GetLastError () returned 0x5 [0124.697] GetLastError () returned 0x5 [0124.697] AreFileApisANSI () returned 1 [0124.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.698] AreFileApisANSI () returned 1 [0124.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.699] AreFileApisANSI () returned 1 [0124.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.703] GetLastError () returned 0x5 [0124.703] GetLastError () returned 0x5 [0124.703] AreFileApisANSI () returned 1 [0124.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.703] AreFileApisANSI () returned 1 [0124.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.704] AreFileApisANSI () returned 1 [0124.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.707] GetLastError () returned 0x5 [0124.707] GetLastError () returned 0x5 [0124.707] AreFileApisANSI () returned 1 [0124.707] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.708] AreFileApisANSI () returned 1 [0124.708] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.709] AreFileApisANSI () returned 1 [0124.709] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.713] GetLastError () returned 0x5 [0124.713] GetLastError () returned 0x5 [0124.713] AreFileApisANSI () returned 1 [0124.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.717] AreFileApisANSI () returned 1 [0124.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.718] AreFileApisANSI () returned 1 [0124.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.721] GetLastError () returned 0x5 [0124.721] GetLastError () returned 0x5 [0124.721] AreFileApisANSI () returned 1 [0124.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.722] AreFileApisANSI () returned 1 [0124.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.723] AreFileApisANSI () returned 1 [0124.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.727] GetLastError () returned 0x5 [0124.727] GetLastError () returned 0x5 [0124.727] AreFileApisANSI () returned 1 [0124.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.728] AreFileApisANSI () returned 1 [0124.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.729] AreFileApisANSI () returned 1 [0124.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.733] GetLastError () returned 0x5 [0124.733] GetLastError () returned 0x5 [0124.733] AreFileApisANSI () returned 1 [0124.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.746] AreFileApisANSI () returned 1 [0124.747] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.748] AreFileApisANSI () returned 1 [0124.748] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.752] GetLastError () returned 0x5 [0124.752] GetLastError () returned 0x5 [0124.752] AreFileApisANSI () returned 1 [0124.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.753] AreFileApisANSI () returned 1 [0124.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.754] AreFileApisANSI () returned 1 [0124.754] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.754] AreFileApisANSI () returned 1 [0124.754] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0124.754] AreFileApisANSI () returned 1 [0124.755] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0124.755] AreFileApisANSI () returned 1 [0124.755] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0124.756] AreFileApisANSI () returned 1 [0124.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0124.756] AreFileApisANSI () returned 1 [0124.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0124.756] AreFileApisANSI () returned 1 [0124.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0124.757] AreFileApisANSI () returned 1 [0124.757] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0124.758] AreFileApisANSI () returned 1 [0124.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.761] GetLastError () returned 0x5 [0124.761] GetLastError () returned 0x5 [0124.762] AreFileApisANSI () returned 1 [0124.762] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.762] AreFileApisANSI () returned 1 [0124.762] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.763] AreFileApisANSI () returned 1 [0124.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.766] GetLastError () returned 0x5 [0124.766] GetLastError () returned 0x5 [0124.766] AreFileApisANSI () returned 1 [0124.766] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.767] AreFileApisANSI () returned 1 [0124.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.767] AreFileApisANSI () returned 1 [0124.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.771] GetLastError () returned 0x5 [0124.771] GetLastError () returned 0x5 [0124.771] AreFileApisANSI () returned 1 [0124.771] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.772] AreFileApisANSI () returned 1 [0124.772] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.772] AreFileApisANSI () returned 1 [0124.772] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.777] GetLastError () returned 0x5 [0124.777] GetLastError () returned 0x5 [0124.777] AreFileApisANSI () returned 1 [0124.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.777] AreFileApisANSI () returned 1 [0124.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.778] AreFileApisANSI () returned 1 [0124.778] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0124.779] AreFileApisANSI () returned 1 [0124.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.782] GetLastError () returned 0x5 [0124.782] GetLastError () returned 0x5 [0124.783] AreFileApisANSI () returned 1 [0124.783] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.783] AreFileApisANSI () returned 1 [0124.783] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.784] AreFileApisANSI () returned 1 [0124.784] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.788] GetLastError () returned 0x5 [0124.788] GetLastError () returned 0x5 [0124.788] AreFileApisANSI () returned 1 [0124.788] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.789] AreFileApisANSI () returned 1 [0124.789] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.790] AreFileApisANSI () returned 1 [0124.790] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0124.794] GetLastError () returned 0x5 [0124.794] GetLastError () returned 0x5 [0124.794] AreFileApisANSI () returned 1 [0124.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4988a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0124.795] AreFileApisANSI () returned 1 [0124.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498428, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0124.796] AreFileApisANSI () returned 1 [0124.796] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ca8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0124.800] GetLastError () returned 0x5 [0124.800] GetLastError () returned 0x5 [0124.800] AreFileApisANSI () returned 1 [0124.800] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4982a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0124.804] AreFileApisANSI () returned 1 [0124.804] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0124.805] AreFileApisANSI () returned 1 [0124.805] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4980a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0124.809] GetLastError () returned 0x5 [0124.809] GetLastError () returned 0x5 [0124.809] AreFileApisANSI () returned 1 [0124.809] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0124.810] AreFileApisANSI () returned 1 [0124.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4984a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0124.811] AreFileApisANSI () returned 1 [0124.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497d28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0124.815] GetLastError () returned 0x5 [0124.815] GetLastError () returned 0x5 [0124.815] AreFileApisANSI () returned 1 [0124.815] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498828, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0124.815] AreFileApisANSI () returned 1 [0124.815] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0124.816] AreFileApisANSI () returned 1 [0124.816] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4984a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0124.823] GetLastError () returned 0x5 [0124.823] GetLastError () returned 0x5 [0124.823] AreFileApisANSI () returned 1 [0124.823] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4989a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0124.824] AreFileApisANSI () returned 1 [0124.824] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0124.825] AreFileApisANSI () returned 1 [0124.825] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0124.829] GetLastError () returned 0x5 [0124.829] GetLastError () returned 0x5 [0124.829] AreFileApisANSI () returned 1 [0124.829] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0124.830] AreFileApisANSI () returned 1 [0124.830] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4984a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0124.831] AreFileApisANSI () returned 1 [0124.831] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4989a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0124.835] GetLastError () returned 0x5 [0124.835] GetLastError () returned 0x5 [0124.835] AreFileApisANSI () returned 1 [0124.835] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4989a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0124.836] AreFileApisANSI () returned 1 [0124.836] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497d28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0124.837] AreFileApisANSI () returned 1 [0124.837] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4981a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0124.848] GetLastError () returned 0x5 [0124.848] GetLastError () returned 0x5 [0124.848] AreFileApisANSI () returned 1 [0124.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498428, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0124.849] AreFileApisANSI () returned 1 [0124.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0124.850] AreFileApisANSI () returned 1 [0124.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0124.854] GetLastError () returned 0x5 [0124.854] GetLastError () returned 0x5 [0124.854] AreFileApisANSI () returned 1 [0124.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498428, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0124.855] AreFileApisANSI () returned 1 [0124.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498a28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0124.856] AreFileApisANSI () returned 1 [0124.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497e28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0124.860] GetLastError () returned 0x5 [0124.860] GetLastError () returned 0x5 [0124.861] AreFileApisANSI () returned 1 [0124.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4980a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0124.863] AreFileApisANSI () returned 1 [0124.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ca8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0124.864] AreFileApisANSI () returned 1 [0124.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0124.870] GetLastError () returned 0x5 [0124.870] GetLastError () returned 0x5 [0124.870] AreFileApisANSI () returned 1 [0124.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498228, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0124.871] AreFileApisANSI () returned 1 [0124.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498b28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0124.872] AreFileApisANSI () returned 1 [0124.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.876] GetLastError () returned 0x5 [0124.876] GetLastError () returned 0x5 [0124.876] AreFileApisANSI () returned 1 [0124.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.876] AreFileApisANSI () returned 1 [0124.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.877] AreFileApisANSI () returned 1 [0124.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.881] GetLastError () returned 0x5 [0124.881] GetLastError () returned 0x5 [0124.881] AreFileApisANSI () returned 1 [0124.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.888] AreFileApisANSI () returned 1 [0124.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.889] AreFileApisANSI () returned 1 [0124.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.893] GetLastError () returned 0x5 [0124.893] GetLastError () returned 0x5 [0124.893] AreFileApisANSI () returned 1 [0124.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.894] AreFileApisANSI () returned 1 [0124.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.895] AreFileApisANSI () returned 1 [0124.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0124.895] AreFileApisANSI () returned 1 [0124.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0124.899] GetLastError () returned 0x5 [0124.899] GetLastError () returned 0x5 [0124.899] AreFileApisANSI () returned 1 [0124.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4985a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0124.900] AreFileApisANSI () returned 1 [0124.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0124.902] AreFileApisANSI () returned 1 [0124.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0124.903] AreFileApisANSI () returned 1 [0124.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0124.904] AreFileApisANSI () returned 1 [0124.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0124.904] AreFileApisANSI () returned 1 [0124.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0124.905] AreFileApisANSI () returned 1 [0124.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.909] GetLastError () returned 0x5 [0124.909] GetLastError () returned 0x5 [0124.909] AreFileApisANSI () returned 1 [0124.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.910] AreFileApisANSI () returned 1 [0124.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.913] AreFileApisANSI () returned 1 [0124.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.919] GetLastError () returned 0x5 [0124.919] GetLastError () returned 0x5 [0124.919] AreFileApisANSI () returned 1 [0124.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.920] AreFileApisANSI () returned 1 [0124.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.921] AreFileApisANSI () returned 1 [0124.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.927] GetLastError () returned 0x5 [0124.927] GetLastError () returned 0x5 [0124.927] AreFileApisANSI () returned 1 [0124.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.928] AreFileApisANSI () returned 1 [0124.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.929] AreFileApisANSI () returned 1 [0124.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4988a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0124.937] GetLastError () returned 0x5 [0124.937] GetLastError () returned 0x5 [0124.937] AreFileApisANSI () returned 1 [0124.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4980a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0124.938] AreFileApisANSI () returned 1 [0124.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498a28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0124.939] AreFileApisANSI () returned 1 [0124.939] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.944] GetLastError () returned 0x5 [0124.944] GetLastError () returned 0x5 [0124.944] AreFileApisANSI () returned 1 [0124.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.946] AreFileApisANSI () returned 1 [0124.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.947] AreFileApisANSI () returned 1 [0124.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.958] GetLastError () returned 0x5 [0124.958] GetLastError () returned 0x5 [0124.958] AreFileApisANSI () returned 1 [0124.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.959] AreFileApisANSI () returned 1 [0124.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.960] AreFileApisANSI () returned 1 [0124.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.966] GetLastError () returned 0x5 [0124.966] GetLastError () returned 0x5 [0124.966] AreFileApisANSI () returned 1 [0124.966] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.966] AreFileApisANSI () returned 1 [0124.966] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.967] AreFileApisANSI () returned 1 [0124.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.972] GetLastError () returned 0x5 [0124.972] GetLastError () returned 0x5 [0124.972] AreFileApisANSI () returned 1 [0124.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.973] AreFileApisANSI () returned 1 [0124.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.973] AreFileApisANSI () returned 1 [0124.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.980] GetLastError () returned 0x5 [0124.980] GetLastError () returned 0x5 [0124.980] AreFileApisANSI () returned 1 [0124.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.980] AreFileApisANSI () returned 1 [0124.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.981] AreFileApisANSI () returned 1 [0124.981] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0124.984] GetLastError () returned 0x5 [0124.985] GetLastError () returned 0x5 [0124.985] AreFileApisANSI () returned 1 [0124.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0124.986] AreFileApisANSI () returned 1 [0124.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.003] AreFileApisANSI () returned 1 [0125.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.007] GetLastError () returned 0x5 [0125.007] GetLastError () returned 0x5 [0125.007] AreFileApisANSI () returned 1 [0125.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0125.008] AreFileApisANSI () returned 1 [0125.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.008] AreFileApisANSI () returned 1 [0125.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.013] GetLastError () returned 0x5 [0125.013] GetLastError () returned 0x5 [0125.013] AreFileApisANSI () returned 1 [0125.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0125.013] AreFileApisANSI () returned 1 [0125.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.014] AreFileApisANSI () returned 1 [0125.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.018] GetLastError () returned 0x5 [0125.018] GetLastError () returned 0x5 [0125.018] AreFileApisANSI () returned 1 [0125.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0125.018] AreFileApisANSI () returned 1 [0125.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.019] AreFileApisANSI () returned 1 [0125.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.023] GetLastError () returned 0x5 [0125.023] GetLastError () returned 0x5 [0125.023] AreFileApisANSI () returned 1 [0125.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0125.023] AreFileApisANSI () returned 1 [0125.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.024] AreFileApisANSI () returned 1 [0125.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.028] GetLastError () returned 0x5 [0125.028] GetLastError () returned 0x5 [0125.028] AreFileApisANSI () returned 1 [0125.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0125.029] AreFileApisANSI () returned 1 [0125.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.029] AreFileApisANSI () returned 1 [0125.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0125.032] GetLastError () returned 0x5 [0125.032] GetLastError () returned 0x5 [0125.032] AreFileApisANSI () returned 1 [0125.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0125.033] AreFileApisANSI () returned 1 [0125.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0125.033] AreFileApisANSI () returned 1 [0125.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0125.037] GetLastError () returned 0x5 [0125.037] GetLastError () returned 0x5 [0125.037] AreFileApisANSI () returned 1 [0125.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0125.038] AreFileApisANSI () returned 1 [0125.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0125.039] AreFileApisANSI () returned 1 [0125.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.042] GetLastError () returned 0x5 [0125.042] GetLastError () returned 0x5 [0125.042] AreFileApisANSI () returned 1 [0125.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0125.042] AreFileApisANSI () returned 1 [0125.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.043] AreFileApisANSI () returned 1 [0125.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.047] GetLastError () returned 0x5 [0125.047] GetLastError () returned 0x5 [0125.047] AreFileApisANSI () returned 1 [0125.047] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0125.048] AreFileApisANSI () returned 1 [0125.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.048] AreFileApisANSI () returned 1 [0125.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0125.052] GetLastError () returned 0x5 [0125.052] GetLastError () returned 0x5 [0125.056] GetLastError () returned 0x5 [0125.056] GetLastError () returned 0x5 [0125.060] GetLastError () returned 0x5 [0125.060] GetLastError () returned 0x5 [0125.067] GetLastError () returned 0x5 [0125.067] GetLastError () returned 0x5 [0125.071] GetLastError () returned 0x5 [0125.071] GetLastError () returned 0x5 [0125.075] GetLastError () returned 0x5 [0125.075] GetLastError () returned 0x5 [0125.080] GetLastError () returned 0x5 [0125.080] GetLastError () returned 0x5 [0125.089] GetLastError () returned 0x5 [0125.089] GetLastError () returned 0x5 [0125.093] GetLastError () returned 0x5 [0125.093] GetLastError () returned 0x5 [0125.108] GetLastError () returned 0x5 [0125.108] GetLastError () returned 0x5 [0125.113] GetLastError () returned 0x5 [0125.113] GetLastError () returned 0x5 [0125.119] GetLastError () returned 0x5 [0125.119] GetLastError () returned 0x5 [0125.136] GetLastError () returned 0x5 [0125.136] GetLastError () returned 0x5 [0125.141] GetLastError () returned 0x5 [0125.141] GetLastError () returned 0x5 [0125.145] GetLastError () returned 0x5 [0125.145] GetLastError () returned 0x5 [0125.150] GetLastError () returned 0x5 [0125.150] GetLastError () returned 0x5 [0125.156] GetLastError () returned 0x5 [0125.156] GetLastError () returned 0x5 [0125.161] GetLastError () returned 0x5 [0125.161] GetLastError () returned 0x5 [0125.165] GetLastError () returned 0x5 [0125.165] GetLastError () returned 0x5 [0125.171] GetLastError () returned 0x5 [0125.171] GetLastError () returned 0x5 [0125.176] GetLastError () returned 0x5 [0125.176] GetLastError () returned 0x5 [0125.181] GetLastError () returned 0x5 [0125.181] GetLastError () returned 0x5 [0125.189] GetLastError () returned 0x5 [0125.189] GetLastError () returned 0x5 [0125.197] GetLastError () returned 0x5 [0125.197] GetLastError () returned 0x5 [0125.202] GetLastError () returned 0x5 [0125.202] GetLastError () returned 0x5 [0125.212] GetLastError () returned 0x5 [0125.212] GetLastError () returned 0x5 [0125.217] GetLastError () returned 0x5 [0125.217] GetLastError () returned 0x5 [0125.222] GetLastError () returned 0x5 [0125.222] GetLastError () returned 0x5 [0125.227] GetLastError () returned 0x5 [0125.227] GetLastError () returned 0x5 [0125.232] GetLastError () returned 0x5 [0125.232] GetLastError () returned 0x5 [0125.236] GetLastError () returned 0x5 [0125.236] GetLastError () returned 0x5 [0125.241] GetLastError () returned 0x5 [0125.241] GetLastError () returned 0x5 [0125.247] GetLastError () returned 0x5 [0125.247] GetLastError () returned 0x5 [0125.252] GetLastError () returned 0x5 [0125.252] GetLastError () returned 0x5 [0125.260] GetLastError () returned 0x5 [0125.260] GetLastError () returned 0x5 [0125.265] GetLastError () returned 0x5 [0125.265] GetLastError () returned 0x5 [0125.270] GetLastError () returned 0x5 [0125.270] GetLastError () returned 0x5 [0125.275] GetLastError () returned 0x5 [0125.275] GetLastError () returned 0x5 [0125.279] GetLastError () returned 0x5 [0125.279] GetLastError () returned 0x5 [0125.284] GetLastError () returned 0x5 [0125.284] GetLastError () returned 0x5 [0125.298] GetLastError () returned 0x5 [0125.298] GetLastError () returned 0x5 [0125.304] GetLastError () returned 0x5 [0125.304] GetLastError () returned 0x5 [0125.308] GetLastError () returned 0x5 [0125.308] GetLastError () returned 0x5 [0125.313] GetLastError () returned 0x5 [0125.313] GetLastError () returned 0x5 [0125.318] GetLastError () returned 0x5 [0125.318] GetLastError () returned 0x5 [0125.325] GetLastError () returned 0x5 [0125.325] GetLastError () returned 0x5 [0125.330] GetLastError () returned 0x5 [0125.330] GetLastError () returned 0x5 [0125.337] GetLastError () returned 0x5 [0125.337] GetLastError () returned 0x5 [0125.343] GetLastError () returned 0x5 [0125.343] GetLastError () returned 0x5 [0125.349] GetLastError () returned 0x5 [0125.349] GetLastError () returned 0x5 [0125.356] GetLastError () returned 0x5 [0125.356] GetLastError () returned 0x5 [0125.363] GetLastError () returned 0x5 [0125.363] GetLastError () returned 0x5 [0125.374] GetLastError () returned 0x5 [0125.374] GetLastError () returned 0x5 [0125.422] GetLastError () returned 0x5 [0125.422] GetLastError () returned 0x5 [0125.426] GetLastError () returned 0x5 [0125.426] GetLastError () returned 0x5 [0125.431] GetLastError () returned 0x5 [0125.431] GetLastError () returned 0x5 [0125.448] GetLastError () returned 0x5 [0125.448] GetLastError () returned 0x5 [0125.454] GetLastError () returned 0x5 [0125.454] GetLastError () returned 0x5 [0125.460] GetLastError () returned 0x5 [0125.460] GetLastError () returned 0x5 [0125.465] GetLastError () returned 0x5 [0125.465] GetLastError () returned 0x5 [0125.471] GetLastError () returned 0x5 [0125.471] GetLastError () returned 0x5 [0125.479] GetLastError () returned 0x5 [0125.479] GetLastError () returned 0x5 [0125.483] GetLastError () returned 0x5 [0125.483] GetLastError () returned 0x5 [0125.486] GetLastError () returned 0x5 [0125.486] GetLastError () returned 0x5 [0125.499] GetLastError () returned 0x5 [0125.499] GetLastError () returned 0x5 [0125.505] GetLastError () returned 0x5 [0125.505] GetLastError () returned 0x5 [0125.511] GetLastError () returned 0x5 [0125.511] GetLastError () returned 0x5 [0126.126] GetLastError () returned 0x5 [0126.126] GetLastError () returned 0x5 [0126.132] GetLastError () returned 0x5 [0126.132] GetLastError () returned 0x5 [0126.138] GetLastError () returned 0x5 [0126.138] GetLastError () returned 0x5 [0130.636] GetLastError () returned 0x5 [0130.636] GetLastError () returned 0x5 [0130.636] GetLastError () returned 0x5 [0130.636] GetLastError () returned 0x5 [0130.636] GetLastError () returned 0x5 [0130.636] GetLastError () returned 0x5 [0130.650] GetLastError () returned 0x5 [0130.650] GetLastError () returned 0x5 [0130.650] GetLastError () returned 0x5 [0130.650] GetLastError () returned 0x5 [0130.650] GetLastError () returned 0x5 [0130.650] GetLastError () returned 0x5 [0136.916] CloseHandle (hObject=0x8c) returned 1 [0136.917] CloseHandle (hObject=0x8c) returned 1 [0136.922] CloseHandle (hObject=0x8c) returned 1 [0136.924] CloseHandle (hObject=0x90) returned 1 [0136.925] CloseHandle (hObject=0x90) returned 1 [0136.928] CloseHandle (hObject=0x90) returned 1 [0136.932] CloseHandle (hObject=0x94) returned 1 [0136.933] CloseHandle (hObject=0x94) returned 1 [0136.934] CloseHandle (hObject=0x94) returned 1 [0136.939] CloseHandle (hObject=0x98) returned 1 [0136.940] CloseHandle (hObject=0x98) returned 1 [0136.943] CloseHandle (hObject=0x98) returned 1 [0136.946] CloseHandle (hObject=0x98) returned 1 [0136.948] CloseHandle (hObject=0x98) returned 1 [0136.950] CloseHandle (hObject=0x98) returned 1 [0136.952] CloseHandle (hObject=0x98) returned 1 [0136.954] CloseHandle (hObject=0x98) returned 1 [0136.960] CloseHandle (hObject=0x98) returned 1 [0136.975] CloseHandle (hObject=0x98) returned 1 [0136.976] CloseHandle (hObject=0x98) returned 1 [0136.977] CloseHandle (hObject=0x98) returned 1 [0136.979] CloseHandle (hObject=0x98) returned 1 [0136.982] CloseHandle (hObject=0x98) returned 1 [0136.986] CloseHandle (hObject=0x98) returned 1 [0136.988] CloseHandle (hObject=0x98) returned 1 [0136.989] CloseHandle (hObject=0x98) returned 1 [0136.992] CloseHandle (hObject=0x98) returned 1 [0136.994] CloseHandle (hObject=0x90) returned 1 [0136.996] CloseHandle (hObject=0x90) returned 1 [0136.997] CloseHandle (hObject=0x90) returned 1 [0136.999] CloseHandle (hObject=0x90) returned 1 [0137.000] CloseHandle (hObject=0x90) returned 1 [0137.003] CloseHandle (hObject=0x90) returned 1 [0137.009] CloseHandle (hObject=0x90) returned 1 [0137.011] CloseHandle (hObject=0x90) returned 1 [0137.012] CloseHandle (hObject=0x90) returned 1 [0137.281] CloseHandle (hObject=0x9c) returned 1 [0137.282] CloseHandle (hObject=0x9c) returned 1 [0137.284] CloseHandle (hObject=0x9c) returned 1 [0137.291] CloseHandle (hObject=0x9c) returned 1 [0137.292] CloseHandle (hObject=0x9c) returned 1 [0137.294] CloseHandle (hObject=0x9c) returned 1 [0137.298] CloseHandle (hObject=0x98) returned 1 [0137.299] CloseHandle (hObject=0x98) returned 1 [0137.302] CloseHandle (hObject=0x98) returned 1 [0137.361] CloseHandle (hObject=0x94) returned 1 [0137.363] CloseHandle (hObject=0x94) returned 1 [0137.365] CloseHandle (hObject=0x94) returned 1 [0137.391] CloseHandle (hObject=0x98) returned 1 [0137.393] CloseHandle (hObject=0x98) returned 1 [0137.395] CloseHandle (hObject=0x98) returned 1 [0137.450] CloseHandle (hObject=0x94) returned 1 [0137.451] CloseHandle (hObject=0x94) returned 1 [0137.452] CloseHandle (hObject=0x94) returned 1 [0137.453] CloseHandle (hObject=0x98) returned 1 [0137.453] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\CIiHmnxMn6Ps.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\ciihmnxmn6ps.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\CIiHmnxMn6Ps.dat.cryptoid" (normalized: "c:\\programdata\\microsoft\\user account pictures\\ciihmnxmn6ps.dat.cryptoid"), dwFlags=0x2) returned 1 [0137.528] CloseHandle (hObject=0x98) returned 1 [0137.529] CloseHandle (hObject=0x98) returned 1 [0137.531] CloseHandle (hObject=0x98) returned 1 [0137.532] CloseHandle (hObject=0x9c) returned 1 [0137.534] CloseHandle (hObject=0x9c) returned 1 [0137.536] CloseHandle (hObject=0x9c) returned 1 [0137.615] CloseHandle (hObject=0x9c) returned 1 [0137.616] CloseHandle (hObject=0x9c) returned 1 [0137.620] CloseHandle (hObject=0x9c) returned 1 [0137.624] CloseHandle (hObject=0x9c) returned 1 [0137.625] CloseHandle (hObject=0x9c) returned 1 [0137.629] CloseHandle (hObject=0x9c) returned 1 [0137.631] CloseHandle (hObject=0x9c) returned 1 [0137.632] CloseHandle (hObject=0x9c) returned 1 [0137.635] CloseHandle (hObject=0x9c) returned 1 [0137.674] CloseHandle (hObject=0x90) returned 1 [0137.677] CloseHandle (hObject=0x90) returned 1 [0137.678] CloseHandle (hObject=0x90) returned 1 [0137.679] CloseHandle (hObject=0x94) returned 1 [0137.680] CloseHandle (hObject=0x94) returned 1 [0137.684] CloseHandle (hObject=0x94) returned 1 [0137.687] CloseHandle (hObject=0x90) returned 1 [0137.689] CloseHandle (hObject=0x90) returned 1 [0137.692] CloseHandle (hObject=0x90) returned 1 [0137.696] CloseHandle (hObject=0x94) returned 1 [0137.698] CloseHandle (hObject=0x94) returned 1 [0137.700] CloseHandle (hObject=0x94) returned 1 [0137.702] CloseHandle (hObject=0x98) returned 1 [0137.705] CloseHandle (hObject=0x98) returned 1 [0137.706] CloseHandle (hObject=0x98) returned 1 [0137.805] CloseHandle (hObject=0x90) returned 1 [0137.808] CloseHandle (hObject=0x90) returned 1 [0137.810] CloseHandle (hObject=0x90) returned 1 [0137.815] CloseHandle (hObject=0x94) returned 1 [0137.817] CloseHandle (hObject=0x94) returned 1 [0137.818] CloseHandle (hObject=0x94) returned 1 [0137.819] CloseHandle (hObject=0x90) returned 1 [0137.823] CloseHandle (hObject=0x90) returned 1 [0137.825] CloseHandle (hObject=0x90) returned 1 [0137.829] CloseHandle (hObject=0x94) returned 1 [0137.831] CloseHandle (hObject=0x94) returned 1 [0137.833] CloseHandle (hObject=0x94) returned 1 [0137.843] CloseHandle (hObject=0x90) returned 1 [0137.845] CloseHandle (hObject=0x90) returned 1 [0137.847] CloseHandle (hObject=0x90) returned 1 [0137.849] CloseHandle (hObject=0x94) returned 1 [0137.851] CloseHandle (hObject=0x94) returned 1 [0137.854] CloseHandle (hObject=0x94) returned 1 [0137.856] CloseHandle (hObject=0x98) returned 1 [0137.858] CloseHandle (hObject=0x98) returned 1 [0137.860] CloseHandle (hObject=0x98) returned 1 [0137.863] CloseHandle (hObject=0x9c) returned 1 [0137.865] CloseHandle (hObject=0x9c) returned 1 [0137.867] CloseHandle (hObject=0x9c) returned 1 [0137.870] CloseHandle (hObject=0x9c) returned 1 [0137.872] CloseHandle (hObject=0x9c) returned 1 [0137.874] CloseHandle (hObject=0x9c) returned 1 [0137.876] CloseHandle (hObject=0x9c) returned 1 [0137.887] CloseHandle (hObject=0x9c) returned 1 [0137.889] CloseHandle (hObject=0x9c) returned 1 [0137.891] CloseHandle (hObject=0x9c) returned 1 [0137.893] CloseHandle (hObject=0x9c) returned 1 [0137.906] CloseHandle (hObject=0x9c) returned 1 [0137.908] CloseHandle (hObject=0x9c) returned 1 [0137.910] CloseHandle (hObject=0x9c) returned 1 [0137.912] CloseHandle (hObject=0x9c) returned 1 [0137.914] CloseHandle (hObject=0x9c) returned 1 [0137.916] CloseHandle (hObject=0x9c) returned 1 [0137.917] CloseHandle (hObject=0x9c) returned 1 [0137.920] CloseHandle (hObject=0x94) returned 1 [0137.922] CloseHandle (hObject=0x94) returned 1 [0137.924] CloseHandle (hObject=0x94) returned 1 [0137.926] CloseHandle (hObject=0x94) returned 1 [0137.928] CloseHandle (hObject=0x94) returned 1 [0137.930] CloseHandle (hObject=0x94) returned 1 [0137.934] CloseHandle (hObject=0x94) returned 1 [0137.936] CloseHandle (hObject=0x94) returned 1 [0137.938] CloseHandle (hObject=0x94) returned 1 [0138.081] CloseHandle (hObject=0xa0) returned 1 [0138.083] CloseHandle (hObject=0xa0) returned 1 [0138.084] CloseHandle (hObject=0xa0) returned 1 [0138.090] CloseHandle (hObject=0xa0) returned 1 [0138.092] CloseHandle (hObject=0xa0) returned 1 [0138.093] CloseHandle (hObject=0xa0) returned 1 [0138.097] CloseHandle (hObject=0x9c) returned 1 [0138.098] CloseHandle (hObject=0x9c) returned 1 [0138.100] CloseHandle (hObject=0x9c) returned 1 [0138.124] CloseHandle (hObject=0x98) returned 1 [0138.126] CloseHandle (hObject=0x98) returned 1 [0138.127] CloseHandle (hObject=0x98) returned 1 [0138.245] CloseHandle (hObject=0x9c) returned 1 [0138.246] CloseHandle (hObject=0x9c) returned 1 [0138.248] CloseHandle (hObject=0x9c) returned 1 [0138.249] CloseHandle (hObject=0xa0) returned 1 [0138.251] CloseHandle (hObject=0xa0) returned 1 [0138.252] CloseHandle (hObject=0xa0) returned 1 [0138.315] CloseHandle (hObject=0xa0) returned 1 [0138.317] CloseHandle (hObject=0xa0) returned 1 [0138.319] CloseHandle (hObject=0xa0) returned 1 [0138.321] CloseHandle (hObject=0xa0) returned 1 [0138.323] CloseHandle (hObject=0xa0) returned 1 [0138.325] CloseHandle (hObject=0xa0) returned 1 [0138.327] CloseHandle (hObject=0xa0) returned 1 [0138.328] CloseHandle (hObject=0xa0) returned 1 [0138.330] CloseHandle (hObject=0xa0) returned 1 [0138.367] CloseHandle (hObject=0x94) returned 1 [0138.369] CloseHandle (hObject=0x94) returned 1 [0138.370] CloseHandle (hObject=0x94) returned 1 [0138.371] CloseHandle (hObject=0x98) returned 1 [0138.373] CloseHandle (hObject=0x98) returned 1 [0138.374] CloseHandle (hObject=0x98) returned 1 [0138.377] CloseHandle (hObject=0x94) returned 1 [0138.378] CloseHandle (hObject=0x94) returned 1 [0138.380] CloseHandle (hObject=0x94) returned 1 [0138.381] CloseHandle (hObject=0x98) returned 1 [0138.382] CloseHandle (hObject=0x98) returned 1 [0138.384] CloseHandle (hObject=0x98) returned 1 [0138.386] CloseHandle (hObject=0x9c) returned 1 [0138.387] CloseHandle (hObject=0x9c) returned 1 [0138.389] CloseHandle (hObject=0x9c) returned 1 [0138.445] CloseHandle (hObject=0x94) returned 1 [0138.447] CloseHandle (hObject=0x94) returned 1 [0138.449] CloseHandle (hObject=0x94) returned 1 [0138.451] CloseHandle (hObject=0x98) returned 1 [0138.452] CloseHandle (hObject=0x98) returned 1 [0138.455] CloseHandle (hObject=0x98) returned 1 [0138.456] CloseHandle (hObject=0x94) returned 1 [0138.458] CloseHandle (hObject=0x94) returned 1 [0138.459] CloseHandle (hObject=0x94) returned 1 [0138.460] CloseHandle (hObject=0x98) returned 1 [0138.462] CloseHandle (hObject=0x98) returned 1 [0138.463] CloseHandle (hObject=0x98) returned 1 [0138.465] CloseHandle (hObject=0x90) returned 1 [0138.466] CloseHandle (hObject=0x90) returned 1 [0138.467] CloseHandle (hObject=0x90) returned 1 [0138.469] CloseHandle (hObject=0x94) returned 1 [0138.508] CloseHandle (hObject=0x94) returned 1 [0138.511] CloseHandle (hObject=0x94) returned 1 [0138.512] CloseHandle (hObject=0x98) returned 1 [0138.513] CloseHandle (hObject=0x98) returned 1 [0138.514] CloseHandle (hObject=0x98) returned 1 [0138.518] CloseHandle (hObject=0x9c) returned 1 [0138.534] CloseHandle (hObject=0x9c) returned 1 [0138.537] CloseHandle (hObject=0x9c) returned 1 [0138.539] CloseHandle (hObject=0xa0) returned 1 [0138.541] CloseHandle (hObject=0xa0) returned 1 [0138.555] CloseHandle (hObject=0xa0) returned 1 [0138.563] CloseHandle (hObject=0xa4) returned 1 [0138.564] CloseHandle (hObject=0xa4) returned 1 [0138.565] CloseHandle (hObject=0xa4) returned 1 [0138.569] CloseHandle (hObject=0xa8) returned 1 [0138.570] CloseHandle (hObject=0xa8) returned 1 [0138.572] CloseHandle (hObject=0xa8) returned 1 [0138.633] CloseHandle (hObject=0xa8) returned 1 [0138.633] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat.cryptoid"), dwFlags=0x2) returned 1 [0138.848] CloseHandle (hObject=0xa8) returned 1 [0138.848] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat.cryptoid"), dwFlags=0x2) returned 1 [0138.851] CloseHandle (hObject=0xa8) returned 1 [0138.852] CloseHandle (hObject=0xa8) returned 1 [0138.868] CloseHandle (hObject=0xa8) returned 1 [0138.871] CloseHandle (hObject=0xa0) returned 1 [0138.872] CloseHandle (hObject=0xa0) returned 1 [0138.903] CloseHandle (hObject=0xa0) returned 1 [0138.905] CloseHandle (hObject=0xa4) returned 1 [0138.906] CloseHandle (hObject=0xa4) returned 1 [0138.908] CloseHandle (hObject=0xa4) returned 1 [0138.911] CloseHandle (hObject=0xa8) returned 1 [0138.912] CloseHandle (hObject=0xa8) returned 1 [0138.935] CloseHandle (hObject=0xa8) returned 1 [0138.937] CloseHandle (hObject=0xac) returned 1 [0138.949] CloseHandle (hObject=0xac) returned 1 [0138.950] CloseHandle (hObject=0xac) returned 1 [0139.042] CloseHandle (hObject=0xb0) returned 1 [0139.043] CloseHandle (hObject=0xb0) returned 1 [0139.045] CloseHandle (hObject=0xb0) returned 1 [0139.046] CloseHandle (hObject=0xac) returned 1 [0139.058] CloseHandle (hObject=0xac) returned 1 [0139.059] CloseHandle (hObject=0xac) returned 1 [0139.061] CloseHandle (hObject=0xa0) returned 1 [0139.120] CloseHandle (hObject=0xa0) returned 1 [0139.121] CloseHandle (hObject=0xa0) returned 1 [0139.167] CloseHandle (hObject=0xa4) returned 1 [0139.252] CloseHandle (hObject=0xa4) returned 1 [0139.253] CloseHandle (hObject=0xa4) returned 1 [0139.256] CloseHandle (hObject=0x9c) returned 1 [0139.257] CloseHandle (hObject=0x9c) returned 1 [0139.258] CloseHandle (hObject=0x9c) returned 1 [0139.266] CloseHandle (hObject=0x9c) returned 1 [0139.267] CloseHandle (hObject=0x9c) returned 1 [0139.308] CloseHandle (hObject=0x9c) returned 1 [0139.309] CloseHandle (hObject=0xa0) returned 1 [0139.324] CloseHandle (hObject=0xa0) returned 1 [0139.325] CloseHandle (hObject=0xa0) returned 1 [0139.327] CloseHandle (hObject=0xa4) returned 1 [0139.328] CloseHandle (hObject=0xa4) returned 1 [0139.331] CloseHandle (hObject=0xa4) returned 1 [0139.334] CloseHandle (hObject=0x9c) returned 1 [0139.698] CloseHandle (hObject=0x9c) returned 1 [0139.699] CloseHandle (hObject=0x9c) returned 1 [0140.096] CloseHandle (hObject=0xa0) returned 1 [0140.161] CloseHandle (hObject=0xa0) returned 1 [0140.162] CloseHandle (hObject=0xa0) returned 1 [0140.163] CloseHandle (hObject=0xa4) returned 1 [0140.164] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\temp\\calendarcache.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\temp\\calendarcache.dat.cryptoid"), dwFlags=0x2) returned 1 [0140.168] CloseHandle (hObject=0xa0) returned 1 [0140.170] CloseHandle (hObject=0xa0) returned 1 [0140.222] CloseHandle (hObject=0xa0) returned 1 [0140.254] CloseHandle (hObject=0xa0) returned 1 [0140.256] CloseHandle (hObject=0xa0) returned 1 [0140.258] CloseHandle (hObject=0xa0) returned 1 [0140.262] CloseHandle (hObject=0x9c) returned 1 [0140.278] CloseHandle (hObject=0x9c) returned 1 [0140.279] CloseHandle (hObject=0x9c) returned 1 [0140.280] CloseHandle (hObject=0xa0) returned 1 [0140.281] CloseHandle (hObject=0xa0) returned 1 [0140.284] CloseHandle (hObject=0xa0) returned 1 [0140.289] CloseHandle (hObject=0xa4) returned 1 [0140.291] CloseHandle (hObject=0xa4) returned 1 [0140.293] CloseHandle (hObject=0xa4) returned 1 [0140.298] CloseHandle (hObject=0xa8) returned 1 [0140.299] CloseHandle (hObject=0xa8) returned 1 [0140.303] CloseHandle (hObject=0xa8) returned 1 [0140.306] CloseHandle (hObject=0xa8) returned 1 [0140.322] CloseHandle (hObject=0xa8) returned 1 [0140.324] CloseHandle (hObject=0xa8) returned 1 [0140.327] CloseHandle (hObject=0xac) returned 1 [0140.328] CloseHandle (hObject=0xac) returned 1 [0140.330] CloseHandle (hObject=0xac) returned 1 [0140.333] CloseHandle (hObject=0xac) returned 1 [0140.333] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0140.340] CloseHandle (hObject=0xa8) returned 1 [0140.341] CloseHandle (hObject=0xa8) returned 1 [0140.343] CloseHandle (hObject=0xa8) returned 1 [0140.360] CloseHandle (hObject=0xac) returned 1 [0140.362] CloseHandle (hObject=0xac) returned 1 [0140.375] CloseHandle (hObject=0xac) returned 1 [0140.385] CloseHandle (hObject=0xac) returned 1 [0140.387] CloseHandle (hObject=0xac) returned 1 [0140.389] CloseHandle (hObject=0xac) returned 1 [0140.405] CloseHandle (hObject=0xb0) returned 1 [0140.406] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db.cryptoid"), dwFlags=0x2) returned 1 [0140.412] CloseHandle (hObject=0xac) returned 1 [0140.414] CloseHandle (hObject=0xac) returned 1 [0140.416] CloseHandle (hObject=0xac) returned 1 [0140.431] CloseHandle (hObject=0xac) returned 1 [0140.433] CloseHandle (hObject=0xac) returned 1 [0140.435] CloseHandle (hObject=0xac) returned 1 [0140.440] CloseHandle (hObject=0xac) returned 1 [0140.441] CloseHandle (hObject=0xac) returned 1 [0140.443] CloseHandle (hObject=0xac) returned 1 [0140.458] CloseHandle (hObject=0xac) returned 1 [0140.461] CloseHandle (hObject=0xac) returned 1 [0140.463] CloseHandle (hObject=0xac) returned 1 [0140.466] CloseHandle (hObject=0xb0) returned 1 [0140.481] CloseHandle (hObject=0xb0) returned 1 [0140.482] CloseHandle (hObject=0xb0) returned 1 [0140.492] CloseHandle (hObject=0xb4) returned 1 [0140.494] CloseHandle (hObject=0xb4) returned 1 [0140.496] CloseHandle (hObject=0xb4) returned 1 [0140.509] CloseHandle (hObject=0xb8) returned 1 [0140.509] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.cryptoid"), dwFlags=0x2) returned 1 [0140.511] CloseHandle (hObject=0xb8) returned 1 [0140.511] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.cryptoid"), dwFlags=0x2) returned 1 [0140.513] CloseHandle (hObject=0xb8) returned 1 [0140.513] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.cryptoid"), dwFlags=0x2) returned 1 [0140.528] CloseHandle (hObject=0xb8) returned 1 [0140.544] CloseHandle (hObject=0xb8) returned 1 [0140.546] CloseHandle (hObject=0xb8) returned 1 [0140.548] CloseHandle (hObject=0xbc) returned 1 [0140.551] CloseHandle (hObject=0xbc) returned 1 [0140.552] CloseHandle (hObject=0xbc) returned 1 [0140.554] CloseHandle (hObject=0xbc) returned 1 [0140.556] CloseHandle (hObject=0xbc) returned 1 [0140.558] CloseHandle (hObject=0xbc) returned 1 [0140.559] CloseHandle (hObject=0xbc) returned 1 [0140.572] CloseHandle (hObject=0xbc) returned 1 [0140.574] CloseHandle (hObject=0xbc) returned 1 [0140.575] CloseHandle (hObject=0xbc) returned 1 [0140.578] CloseHandle (hObject=0xbc) returned 1 [0140.579] CloseHandle (hObject=0xbc) returned 1 [0140.581] CloseHandle (hObject=0xbc) returned 1 [0140.584] CloseHandle (hObject=0xbc) returned 1 [0140.585] CloseHandle (hObject=0xbc) returned 1 [0140.586] CloseHandle (hObject=0xbc) returned 1 [0140.595] CloseHandle (hObject=0xbc) returned 1 [0140.597] CloseHandle (hObject=0xbc) returned 1 [0140.599] CloseHandle (hObject=0xbc) returned 1 [0140.601] CloseHandle (hObject=0xbc) returned 1 [0140.603] CloseHandle (hObject=0xbc) returned 1 [0140.604] CloseHandle (hObject=0xbc) returned 1 [0140.610] CloseHandle (hObject=0xbc) returned 1 [0140.611] CloseHandle (hObject=0xbc) returned 1 [0140.613] CloseHandle (hObject=0xbc) returned 1 [0140.627] CloseHandle (hObject=0xbc) returned 1 [0140.629] CloseHandle (hObject=0xbc) returned 1 [0140.630] CloseHandle (hObject=0xbc) returned 1 [0140.632] CloseHandle (hObject=0xbc) returned 1 [0140.633] CloseHandle (hObject=0xbc) returned 1 [0140.636] CloseHandle (hObject=0xbc) returned 1 [0140.680] CloseHandle (hObject=0xbc) returned 1 [0140.682] CloseHandle (hObject=0xbc) returned 1 [0140.686] CloseHandle (hObject=0xbc) returned 1 [0140.695] CloseHandle (hObject=0xbc) returned 1 [0140.696] CloseHandle (hObject=0xbc) returned 1 [0140.699] CloseHandle (hObject=0xbc) returned 1 [0140.701] CloseHandle (hObject=0xbc) returned 1 [0140.702] CloseHandle (hObject=0xbc) returned 1 [0140.704] CloseHandle (hObject=0xbc) returned 1 [0140.710] CloseHandle (hObject=0xbc) returned 1 [0140.712] CloseHandle (hObject=0xbc) returned 1 [0140.719] CloseHandle (hObject=0xbc) returned 1 [0140.722] CloseHandle (hObject=0xbc) returned 1 [0140.723] CloseHandle (hObject=0xbc) returned 1 [0140.724] CloseHandle (hObject=0xbc) returned 1 [0140.726] CloseHandle (hObject=0xbc) returned 1 [0140.735] CloseHandle (hObject=0xbc) returned 1 [0140.738] CloseHandle (hObject=0xbc) returned 1 [0140.741] CloseHandle (hObject=0xbc) returned 1 [0140.742] CloseHandle (hObject=0xbc) returned 1 [0140.743] CloseHandle (hObject=0xbc) returned 1 [0140.761] CloseHandle (hObject=0xbc) returned 1 [0140.762] CloseHandle (hObject=0xbc) returned 1 [0140.764] CloseHandle (hObject=0xbc) returned 1 [0140.766] CloseHandle (hObject=0xbc) returned 1 [0140.767] CloseHandle (hObject=0xbc) returned 1 [0140.768] CloseHandle (hObject=0xbc) returned 1 [0140.787] CloseHandle (hObject=0xbc) returned 1 [0140.788] CloseHandle (hObject=0xbc) returned 1 [0140.790] CloseHandle (hObject=0xbc) returned 1 [0140.800] CloseHandle (hObject=0xbc) returned 1 [0140.802] CloseHandle (hObject=0xbc) returned 1 [0140.803] CloseHandle (hObject=0xbc) returned 1 [0140.806] CloseHandle (hObject=0xbc) returned 1 [0140.808] CloseHandle (hObject=0xbc) returned 1 [0140.811] CloseHandle (hObject=0xbc) returned 1 [0140.824] CloseHandle (hObject=0xbc) returned 1 [0140.826] CloseHandle (hObject=0xbc) returned 1 [0140.828] CloseHandle (hObject=0xbc) returned 1 [0140.841] CloseHandle (hObject=0xbc) returned 1 [0140.843] CloseHandle (hObject=0xbc) returned 1 [0140.845] CloseHandle (hObject=0xbc) returned 1 [0140.849] CloseHandle (hObject=0xbc) returned 1 [0140.850] CloseHandle (hObject=0xbc) returned 1 [0140.885] CloseHandle (hObject=0xbc) returned 1 [0140.908] CloseHandle (hObject=0xbc) returned 1 [0140.909] CloseHandle (hObject=0xbc) returned 1 [0140.910] CloseHandle (hObject=0xbc) returned 1 [0140.930] CloseHandle (hObject=0xbc) returned 1 [0140.932] CloseHandle (hObject=0xbc) returned 1 [0140.933] CloseHandle (hObject=0xbc) returned 1 [0140.946] CloseHandle (hObject=0xbc) returned 1 [0140.947] CloseHandle (hObject=0xbc) returned 1 [0140.949] CloseHandle (hObject=0xbc) returned 1 [0140.951] CloseHandle (hObject=0xbc) returned 1 [0140.952] CloseHandle (hObject=0xbc) returned 1 [0140.954] CloseHandle (hObject=0xbc) returned 1 [0140.962] CloseHandle (hObject=0xbc) returned 1 [0140.965] CloseHandle (hObject=0xbc) returned 1 [0140.967] CloseHandle (hObject=0xbc) returned 1 [0140.982] CloseHandle (hObject=0xbc) returned 1 [0140.985] CloseHandle (hObject=0xbc) returned 1 [0140.987] CloseHandle (hObject=0xbc) returned 1 [0140.991] CloseHandle (hObject=0xbc) returned 1 [0140.993] CloseHandle (hObject=0xbc) returned 1 [0140.998] CloseHandle (hObject=0xbc) returned 1 [0141.007] CloseHandle (hObject=0xbc) returned 1 [0141.012] CloseHandle (hObject=0xbc) returned 1 [0141.014] CloseHandle (hObject=0xbc) returned 1 [0141.017] CloseHandle (hObject=0xbc) returned 1 [0141.019] CloseHandle (hObject=0xbc) returned 1 [0141.022] CloseHandle (hObject=0xbc) returned 1 [0141.037] CloseHandle (hObject=0xbc) returned 1 [0141.038] CloseHandle (hObject=0xbc) returned 1 [0141.040] CloseHandle (hObject=0xbc) returned 1 [0141.052] CloseHandle (hObject=0xbc) returned 1 [0141.055] CloseHandle (hObject=0xbc) returned 1 [0141.058] CloseHandle (hObject=0xbc) returned 1 [0141.062] CloseHandle (hObject=0xbc) returned 1 [0141.064] CloseHandle (hObject=0xbc) returned 1 [0141.068] CloseHandle (hObject=0xbc) returned 1 [0141.072] CloseHandle (hObject=0xbc) returned 1 [0141.074] CloseHandle (hObject=0xbc) returned 1 [0141.077] CloseHandle (hObject=0xbc) returned 1 [0141.080] CloseHandle (hObject=0xbc) returned 1 [0141.096] CloseHandle (hObject=0xbc) returned 1 [0141.099] CloseHandle (hObject=0xbc) returned 1 [0141.103] CloseHandle (hObject=0xbc) returned 1 [0141.107] CloseHandle (hObject=0xbc) returned 1 [0141.110] CloseHandle (hObject=0xbc) returned 1 [0141.113] CloseHandle (hObject=0xbc) returned 1 [0141.116] CloseHandle (hObject=0xbc) returned 1 [0141.118] CloseHandle (hObject=0xbc) returned 1 [0141.123] CloseHandle (hObject=0xbc) returned 1 [0141.124] CloseHandle (hObject=0xbc) returned 1 [0141.130] CloseHandle (hObject=0xb8) returned 1 [0141.132] CloseHandle (hObject=0xb8) returned 1 [0141.135] CloseHandle (hObject=0xb8) returned 1 [0141.137] CloseHandle (hObject=0xb0) returned 1 [0141.141] CloseHandle (hObject=0xb0) returned 1 [0141.144] CloseHandle (hObject=0xb0) returned 1 [0141.168] CloseHandle (hObject=0xb4) returned 1 [0141.170] CloseHandle (hObject=0xb4) returned 1 [0141.172] CloseHandle (hObject=0xb4) returned 1 [0141.186] CloseHandle (hObject=0xb8) returned 1 [0141.187] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.cryptoid"), dwFlags=0x2) returned 1 [0141.190] CloseHandle (hObject=0xb8) returned 1 [0141.190] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.cryptoid"), dwFlags=0x2) returned 1 [0141.193] CloseHandle (hObject=0xb8) returned 1 [0141.193] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.cryptoid"), dwFlags=0x2) returned 1 [0141.218] CloseHandle (hObject=0xb8) returned 1 [0141.239] CloseHandle (hObject=0xb8) returned 1 [0141.242] CloseHandle (hObject=0xb8) returned 1 [0141.244] CloseHandle (hObject=0xbc) returned 1 [0141.251] CloseHandle (hObject=0xbc) returned 1 [0141.252] CloseHandle (hObject=0xbc) returned 1 [0141.259] CloseHandle (hObject=0xbc) returned 1 [0141.272] CloseHandle (hObject=0xbc) returned 1 [0141.276] CloseHandle (hObject=0xbc) returned 1 [0141.279] CloseHandle (hObject=0xbc) returned 1 [0141.286] CloseHandle (hObject=0xbc) returned 1 [0141.289] CloseHandle (hObject=0xbc) returned 1 [0141.292] CloseHandle (hObject=0xbc) returned 1 [0141.295] CloseHandle (hObject=0xbc) returned 1 [0141.297] CloseHandle (hObject=0xbc) returned 1 [0141.299] CloseHandle (hObject=0xbc) returned 1 [0141.304] CloseHandle (hObject=0xbc) returned 1 [0141.307] CloseHandle (hObject=0xbc) returned 1 [0141.310] CloseHandle (hObject=0xbc) returned 1 [0141.313] CloseHandle (hObject=0xbc) returned 1 [0141.316] CloseHandle (hObject=0xbc) returned 1 [0141.319] CloseHandle (hObject=0xbc) returned 1 [0141.322] CloseHandle (hObject=0xbc) returned 1 [0141.324] CloseHandle (hObject=0xbc) returned 1 [0141.327] CloseHandle (hObject=0xbc) returned 1 [0141.330] CloseHandle (hObject=0xbc) returned 1 [0141.332] CloseHandle (hObject=0xbc) returned 1 [0141.335] CloseHandle (hObject=0xbc) returned 1 [0141.338] CloseHandle (hObject=0xbc) returned 1 [0141.341] CloseHandle (hObject=0xbc) returned 1 [0141.344] CloseHandle (hObject=0xbc) returned 1 [0141.348] CloseHandle (hObject=0xbc) returned 1 [0141.350] CloseHandle (hObject=0xbc) returned 1 [0141.352] CloseHandle (hObject=0xbc) returned 1 [0141.366] CloseHandle (hObject=0xbc) returned 1 [0141.368] CloseHandle (hObject=0xbc) returned 1 [0141.371] CloseHandle (hObject=0xbc) returned 1 [0141.379] CloseHandle (hObject=0xbc) returned 1 [0141.381] CloseHandle (hObject=0xbc) returned 1 [0141.384] CloseHandle (hObject=0xbc) returned 1 [0141.387] CloseHandle (hObject=0xbc) returned 1 [0141.389] CloseHandle (hObject=0xbc) returned 1 [0141.393] CloseHandle (hObject=0xbc) returned 1 [0141.411] CloseHandle (hObject=0xbc) returned 1 [0141.414] CloseHandle (hObject=0xbc) returned 1 [0141.417] CloseHandle (hObject=0xbc) returned 1 [0141.424] CloseHandle (hObject=0xbc) returned 1 [0141.426] CloseHandle (hObject=0xbc) returned 1 [0141.428] CloseHandle (hObject=0xbc) returned 1 [0141.431] CloseHandle (hObject=0xbc) returned 1 [0141.432] CloseHandle (hObject=0xbc) returned 1 [0141.434] CloseHandle (hObject=0xbc) returned 1 [0141.438] CloseHandle (hObject=0xbc) returned 1 [0141.439] CloseHandle (hObject=0xbc) returned 1 [0141.441] CloseHandle (hObject=0xbc) returned 1 [0141.459] CloseHandle (hObject=0xbc) returned 1 [0141.461] CloseHandle (hObject=0xbc) returned 1 [0141.463] CloseHandle (hObject=0xbc) returned 1 [0141.466] CloseHandle (hObject=0xbc) returned 1 [0141.468] CloseHandle (hObject=0xbc) returned 1 [0141.470] CloseHandle (hObject=0xbc) returned 1 [0141.475] CloseHandle (hObject=0xbc) returned 1 [0141.477] CloseHandle (hObject=0xbc) returned 1 [0141.482] CloseHandle (hObject=0xbc) returned 1 [0141.488] CloseHandle (hObject=0xbc) returned 1 [0141.490] CloseHandle (hObject=0xbc) returned 1 [0141.493] CloseHandle (hObject=0xbc) returned 1 [0141.496] CloseHandle (hObject=0xbc) returned 1 [0141.497] CloseHandle (hObject=0xbc) returned 1 [0141.499] CloseHandle (hObject=0xbc) returned 1 [0141.502] CloseHandle (hObject=0xbc) returned 1 [0141.503] CloseHandle (hObject=0xbc) returned 1 [0141.506] CloseHandle (hObject=0xbc) returned 1 [0141.509] CloseHandle (hObject=0xbc) returned 1 [0141.511] CloseHandle (hObject=0xbc) returned 1 [0141.512] CloseHandle (hObject=0xbc) returned 1 [0141.515] CloseHandle (hObject=0xbc) returned 1 [0141.516] CloseHandle (hObject=0xbc) returned 1 [0141.519] CloseHandle (hObject=0xbc) returned 1 [0141.522] CloseHandle (hObject=0xbc) returned 1 [0141.523] CloseHandle (hObject=0xbc) returned 1 [0141.525] CloseHandle (hObject=0xbc) returned 1 [0141.532] CloseHandle (hObject=0xbc) returned 1 [0141.534] CloseHandle (hObject=0xbc) returned 1 [0141.536] CloseHandle (hObject=0xbc) returned 1 [0141.539] CloseHandle (hObject=0xbc) returned 1 [0141.541] CloseHandle (hObject=0xbc) returned 1 [0141.543] CloseHandle (hObject=0xbc) returned 1 [0141.552] CloseHandle (hObject=0xbc) returned 1 [0141.556] CloseHandle (hObject=0xbc) returned 1 [0141.558] CloseHandle (hObject=0xbc) returned 1 [0141.570] CloseHandle (hObject=0xbc) returned 1 [0141.571] CloseHandle (hObject=0xbc) returned 1 [0141.573] CloseHandle (hObject=0xbc) returned 1 [0141.575] CloseHandle (hObject=0xbc) returned 1 [0141.577] CloseHandle (hObject=0xbc) returned 1 [0141.579] CloseHandle (hObject=0xbc) returned 1 [0141.585] CloseHandle (hObject=0xbc) returned 1 [0141.587] CloseHandle (hObject=0xbc) returned 1 [0141.588] CloseHandle (hObject=0xbc) returned 1 [0141.601] CloseHandle (hObject=0xbc) returned 1 [0141.603] CloseHandle (hObject=0xbc) returned 1 [0141.606] CloseHandle (hObject=0xbc) returned 1 [0141.608] CloseHandle (hObject=0xbc) returned 1 [0141.610] CloseHandle (hObject=0xbc) returned 1 [0141.612] CloseHandle (hObject=0xbc) returned 1 [0141.621] CloseHandle (hObject=0xbc) returned 1 [0141.623] CloseHandle (hObject=0xbc) returned 1 [0141.626] CloseHandle (hObject=0xbc) returned 1 [0141.634] CloseHandle (hObject=0xbc) returned 1 [0141.635] CloseHandle (hObject=0xbc) returned 1 [0141.638] CloseHandle (hObject=0xbc) returned 1 [0141.642] CloseHandle (hObject=0xbc) returned 1 [0141.643] CloseHandle (hObject=0xbc) returned 1 [0141.648] CloseHandle (hObject=0xbc) returned 1 [0141.651] CloseHandle (hObject=0xbc) returned 1 [0141.653] CloseHandle (hObject=0xbc) returned 1 [0141.654] CloseHandle (hObject=0xbc) returned 1 [0141.668] CloseHandle (hObject=0xbc) returned 1 [0141.669] CloseHandle (hObject=0xbc) returned 1 [0141.672] CloseHandle (hObject=0xbc) returned 1 [0141.677] CloseHandle (hObject=0xbc) returned 1 [0141.679] CloseHandle (hObject=0xbc) returned 1 [0141.680] CloseHandle (hObject=0xbc) returned 1 [0141.693] CloseHandle (hObject=0xbc) returned 1 [0141.694] CloseHandle (hObject=0xbc) returned 1 [0141.696] CloseHandle (hObject=0xbc) returned 1 [0141.700] CloseHandle (hObject=0xbc) returned 1 [0141.702] CloseHandle (hObject=0xbc) returned 1 [0141.705] CloseHandle (hObject=0xb8) returned 1 [0141.707] CloseHandle (hObject=0xb8) returned 1 [0141.710] CloseHandle (hObject=0xb8) returned 1 [0141.713] CloseHandle (hObject=0xb0) returned 1 [0141.724] CloseHandle (hObject=0xb0) returned 1 [0141.727] CloseHandle (hObject=0xb0) returned 1 [0141.740] CloseHandle (hObject=0xb4) returned 1 [0141.741] CloseHandle (hObject=0xb4) returned 1 [0141.743] CloseHandle (hObject=0xb4) returned 1 [0141.756] CloseHandle (hObject=0xb8) returned 1 [0141.756] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.cryptoid"), dwFlags=0x2) returned 1 [0141.780] CloseHandle (hObject=0xb8) returned 1 [0141.782] CloseHandle (hObject=0xb8) returned 1 [0141.785] CloseHandle (hObject=0xb8) returned 1 [0141.787] CloseHandle (hObject=0xbc) returned 1 [0141.802] CloseHandle (hObject=0xbc) returned 1 [0141.803] CloseHandle (hObject=0xbc) returned 1 [0141.805] CloseHandle (hObject=0xbc) returned 1 [0141.822] CloseHandle (hObject=0xbc) returned 1 [0141.824] CloseHandle (hObject=0xbc) returned 1 [0141.826] CloseHandle (hObject=0xbc) returned 1 [0141.829] CloseHandle (hObject=0xbc) returned 1 [0141.831] CloseHandle (hObject=0xbc) returned 1 [0141.832] CloseHandle (hObject=0xbc) returned 1 [0141.835] CloseHandle (hObject=0xbc) returned 1 [0141.837] CloseHandle (hObject=0xbc) returned 1 [0141.839] CloseHandle (hObject=0xbc) returned 1 [0141.853] CloseHandle (hObject=0xbc) returned 1 [0141.854] CloseHandle (hObject=0xbc) returned 1 [0141.855] CloseHandle (hObject=0xbc) returned 1 [0141.858] CloseHandle (hObject=0xbc) returned 1 [0141.859] CloseHandle (hObject=0xbc) returned 1 [0141.861] CloseHandle (hObject=0xbc) returned 1 [0141.867] CloseHandle (hObject=0xbc) returned 1 [0141.869] CloseHandle (hObject=0xbc) returned 1 [0141.871] CloseHandle (hObject=0xbc) returned 1 [0141.881] CloseHandle (hObject=0xbc) returned 1 [0141.883] CloseHandle (hObject=0xbc) returned 1 [0141.888] CloseHandle (hObject=0xbc) returned 1 [0141.891] CloseHandle (hObject=0xbc) returned 1 [0141.892] CloseHandle (hObject=0xbc) returned 1 [0141.893] CloseHandle (hObject=0xbc) returned 1 [0141.900] CloseHandle (hObject=0xbc) returned 1 [0141.910] CloseHandle (hObject=0xbc) returned 1 [0141.913] CloseHandle (hObject=0xbc) returned 1 [0141.923] CloseHandle (hObject=0xbc) returned 1 [0141.924] CloseHandle (hObject=0xbc) returned 1 [0141.926] CloseHandle (hObject=0xbc) returned 1 [0141.929] CloseHandle (hObject=0xbc) returned 1 [0141.934] CloseHandle (hObject=0xbc) returned 1 [0141.936] CloseHandle (hObject=0xbc) returned 1 [0141.940] CloseHandle (hObject=0xbc) returned 1 [0141.941] CloseHandle (hObject=0xbc) returned 1 [0141.944] CloseHandle (hObject=0xbc) returned 1 [0141.952] CloseHandle (hObject=0xbc) returned 1 [0141.954] CloseHandle (hObject=0xbc) returned 1 [0141.957] CloseHandle (hObject=0xbc) returned 1 [0141.960] CloseHandle (hObject=0xbc) returned 1 [0141.962] CloseHandle (hObject=0xbc) returned 1 [0141.964] CloseHandle (hObject=0xbc) returned 1 [0141.975] CloseHandle (hObject=0xbc) returned 1 [0141.977] CloseHandle (hObject=0xbc) returned 1 [0141.981] CloseHandle (hObject=0xbc) returned 1 [0141.992] CloseHandle (hObject=0xbc) returned 1 [0141.995] CloseHandle (hObject=0xbc) returned 1 [0141.997] CloseHandle (hObject=0xbc) returned 1 [0142.000] CloseHandle (hObject=0xbc) returned 1 [0142.002] CloseHandle (hObject=0xbc) returned 1 [0142.005] CloseHandle (hObject=0xbc) returned 1 [0142.007] CloseHandle (hObject=0xbc) returned 1 [0142.008] CloseHandle (hObject=0xbc) returned 1 [0142.010] CloseHandle (hObject=0xbc) returned 1 [0142.013] CloseHandle (hObject=0xbc) returned 1 [0142.014] CloseHandle (hObject=0xbc) returned 1 [0142.016] CloseHandle (hObject=0xbc) returned 1 [0142.018] CloseHandle (hObject=0xbc) returned 1 [0142.020] CloseHandle (hObject=0xbc) returned 1 [0142.022] CloseHandle (hObject=0xbc) returned 1 [0142.026] CloseHandle (hObject=0xbc) returned 1 [0142.027] CloseHandle (hObject=0xbc) returned 1 [0142.029] CloseHandle (hObject=0xbc) returned 1 [0142.032] CloseHandle (hObject=0xbc) returned 1 [0142.033] CloseHandle (hObject=0xbc) returned 1 [0142.034] CloseHandle (hObject=0xbc) returned 1 [0142.038] CloseHandle (hObject=0xbc) returned 1 [0142.040] CloseHandle (hObject=0xbc) returned 1 [0142.042] CloseHandle (hObject=0xbc) returned 1 [0142.044] CloseHandle (hObject=0xbc) returned 1 [0142.045] CloseHandle (hObject=0xbc) returned 1 [0142.048] CloseHandle (hObject=0xbc) returned 1 [0142.060] CloseHandle (hObject=0xbc) returned 1 [0142.061] CloseHandle (hObject=0xbc) returned 1 [0142.063] CloseHandle (hObject=0xbc) returned 1 [0142.066] CloseHandle (hObject=0xbc) returned 1 [0142.067] CloseHandle (hObject=0xbc) returned 1 [0142.069] CloseHandle (hObject=0xbc) returned 1 [0142.081] CloseHandle (hObject=0xbc) returned 1 [0142.093] CloseHandle (hObject=0xbc) returned 1 [0142.096] CloseHandle (hObject=0xbc) returned 1 [0142.152] CloseHandle (hObject=0xbc) returned 1 [0142.153] CloseHandle (hObject=0xbc) returned 1 [0142.157] CloseHandle (hObject=0xbc) returned 1 [0142.160] CloseHandle (hObject=0xbc) returned 1 [0142.161] CloseHandle (hObject=0xbc) returned 1 [0142.164] CloseHandle (hObject=0xbc) returned 1 [0142.166] CloseHandle (hObject=0xbc) returned 1 [0142.169] CloseHandle (hObject=0xbc) returned 1 [0142.170] CloseHandle (hObject=0xbc) returned 1 [0142.174] CloseHandle (hObject=0xbc) returned 1 [0142.176] CloseHandle (hObject=0xbc) returned 1 [0142.178] CloseHandle (hObject=0xbc) returned 1 [0142.188] CloseHandle (hObject=0xbc) returned 1 [0142.190] CloseHandle (hObject=0xbc) returned 1 [0142.191] CloseHandle (hObject=0xbc) returned 1 [0142.195] CloseHandle (hObject=0xbc) returned 1 [0142.196] CloseHandle (hObject=0xbc) returned 1 [0142.199] CloseHandle (hObject=0xbc) returned 1 [0142.207] CloseHandle (hObject=0xbc) returned 1 [0142.210] CloseHandle (hObject=0xbc) returned 1 [0142.211] CloseHandle (hObject=0xbc) returned 1 [0142.213] CloseHandle (hObject=0xbc) returned 1 [0142.215] CloseHandle (hObject=0xbc) returned 1 [0142.217] CloseHandle (hObject=0xbc) returned 1 [0142.219] CloseHandle (hObject=0xbc) returned 1 [0142.221] CloseHandle (hObject=0xbc) returned 1 [0142.224] CloseHandle (hObject=0xbc) returned 1 [0142.226] CloseHandle (hObject=0xbc) returned 1 [0142.228] CloseHandle (hObject=0xbc) returned 1 [0142.230] CloseHandle (hObject=0xbc) returned 1 [0142.232] CloseHandle (hObject=0xbc) returned 1 [0142.233] CloseHandle (hObject=0xbc) returned 1 [0142.235] CloseHandle (hObject=0xbc) returned 1 [0142.242] CloseHandle (hObject=0xbc) returned 1 [0142.243] CloseHandle (hObject=0xbc) returned 1 [0142.246] CloseHandle (hObject=0xbc) returned 1 [0142.249] CloseHandle (hObject=0xbc) returned 1 [0142.251] CloseHandle (hObject=0xbc) returned 1 [0142.252] CloseHandle (hObject=0xbc) returned 1 [0142.260] CloseHandle (hObject=0xbc) returned 1 [0142.262] CloseHandle (hObject=0xbc) returned 1 [0142.265] CloseHandle (hObject=0xbc) returned 1 [0142.277] CloseHandle (hObject=0xbc) returned 1 [0142.279] CloseHandle (hObject=0xbc) returned 1 [0142.281] CloseHandle (hObject=0xbc) returned 1 [0142.284] CloseHandle (hObject=0xbc) returned 1 [0142.285] CloseHandle (hObject=0xbc) returned 1 [0142.287] CloseHandle (hObject=0xb8) returned 1 [0142.299] CloseHandle (hObject=0xb8) returned 1 [0142.301] CloseHandle (hObject=0xb8) returned 1 [0142.303] CloseHandle (hObject=0xb0) returned 1 [0142.305] CloseHandle (hObject=0xb0) returned 1 [0142.307] CloseHandle (hObject=0xb0) returned 1 [0142.353] CloseHandle (hObject=0xb4) returned 1 [0142.354] CloseHandle (hObject=0xb4) returned 1 [0142.356] CloseHandle (hObject=0xb4) returned 1 [0142.361] CloseHandle (hObject=0xb8) returned 1 [0142.362] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.cryptoid"), dwFlags=0x2) returned 1 [0142.388] CloseHandle (hObject=0xb8) returned 1 [0142.389] CloseHandle (hObject=0xb8) returned 1 [0142.409] CloseHandle (hObject=0xb8) returned 1 [0142.411] CloseHandle (hObject=0xbc) returned 1 [0142.431] CloseHandle (hObject=0xbc) returned 1 [0142.433] CloseHandle (hObject=0xbc) returned 1 [0142.434] CloseHandle (hObject=0xbc) returned 1 [0142.437] CloseHandle (hObject=0xbc) returned 1 [0142.439] CloseHandle (hObject=0xbc) returned 1 [0142.443] CloseHandle (hObject=0xbc) returned 1 [0142.456] CloseHandle (hObject=0xbc) returned 1 [0142.457] CloseHandle (hObject=0xbc) returned 1 [0142.460] CloseHandle (hObject=0xbc) returned 1 [0142.465] CloseHandle (hObject=0xbc) returned 1 [0142.466] CloseHandle (hObject=0xbc) returned 1 [0142.470] CloseHandle (hObject=0xbc) returned 1 [0142.472] CloseHandle (hObject=0xbc) returned 1 [0142.474] CloseHandle (hObject=0xbc) returned 1 [0142.476] CloseHandle (hObject=0xbc) returned 1 [0142.480] CloseHandle (hObject=0xbc) returned 1 [0142.482] CloseHandle (hObject=0xbc) returned 1 [0142.485] CloseHandle (hObject=0xbc) returned 1 [0142.488] CloseHandle (hObject=0xbc) returned 1 [0142.490] CloseHandle (hObject=0xbc) returned 1 [0142.493] CloseHandle (hObject=0xbc) returned 1 [0142.507] CloseHandle (hObject=0xbc) returned 1 [0142.508] CloseHandle (hObject=0xbc) returned 1 [0142.512] CloseHandle (hObject=0xbc) returned 1 [0142.515] CloseHandle (hObject=0xbc) returned 1 [0142.516] CloseHandle (hObject=0xbc) returned 1 [0142.518] CloseHandle (hObject=0xbc) returned 1 [0142.540] CloseHandle (hObject=0xbc) returned 1 [0142.543] CloseHandle (hObject=0xbc) returned 1 [0142.545] CloseHandle (hObject=0xbc) returned 1 [0142.557] CloseHandle (hObject=0xbc) returned 1 [0142.559] CloseHandle (hObject=0xbc) returned 1 [0142.561] CloseHandle (hObject=0xbc) returned 1 [0142.564] CloseHandle (hObject=0xbc) returned 1 [0142.566] CloseHandle (hObject=0xbc) returned 1 [0142.569] CloseHandle (hObject=0xbc) returned 1 [0142.578] CloseHandle (hObject=0xbc) returned 1 [0142.579] CloseHandle (hObject=0xbc) returned 1 [0142.582] CloseHandle (hObject=0xbc) returned 1 [0142.585] CloseHandle (hObject=0xbc) returned 1 [0142.586] CloseHandle (hObject=0xbc) returned 1 [0142.588] CloseHandle (hObject=0xbc) returned 1 [0142.595] CloseHandle (hObject=0xbc) returned 1 [0142.596] CloseHandle (hObject=0xbc) returned 1 [0142.598] CloseHandle (hObject=0xbc) returned 1 [0142.602] CloseHandle (hObject=0xbc) returned 1 [0142.603] CloseHandle (hObject=0xbc) returned 1 [0142.606] CloseHandle (hObject=0xbc) returned 1 [0142.612] CloseHandle (hObject=0xbc) returned 1 [0142.614] CloseHandle (hObject=0xbc) returned 1 [0142.617] CloseHandle (hObject=0xbc) returned 1 [0142.621] CloseHandle (hObject=0xbc) returned 1 [0142.623] CloseHandle (hObject=0xbc) returned 1 [0142.626] CloseHandle (hObject=0xbc) returned 1 [0142.629] CloseHandle (hObject=0xbc) returned 1 [0142.630] CloseHandle (hObject=0xbc) returned 1 [0142.632] CloseHandle (hObject=0xbc) returned 1 [0142.640] CloseHandle (hObject=0xbc) returned 1 [0142.641] CloseHandle (hObject=0xbc) returned 1 [0142.643] CloseHandle (hObject=0xbc) returned 1 [0142.646] CloseHandle (hObject=0xbc) returned 1 [0142.648] CloseHandle (hObject=0xbc) returned 1 [0142.650] CloseHandle (hObject=0xbc) returned 1 [0142.659] CloseHandle (hObject=0xbc) returned 1 [0142.661] CloseHandle (hObject=0xbc) returned 1 [0142.663] CloseHandle (hObject=0xbc) returned 1 [0142.665] CloseHandle (hObject=0xbc) returned 1 [0142.667] CloseHandle (hObject=0xbc) returned 1 [0142.669] CloseHandle (hObject=0xbc) returned 1 [0142.677] CloseHandle (hObject=0xbc) returned 1 [0142.679] CloseHandle (hObject=0xbc) returned 1 [0142.681] CloseHandle (hObject=0xbc) returned 1 [0142.695] CloseHandle (hObject=0xbc) returned 1 [0142.697] CloseHandle (hObject=0xbc) returned 1 [0142.698] CloseHandle (hObject=0xbc) returned 1 [0142.710] CloseHandle (hObject=0xbc) returned 1 [0142.711] CloseHandle (hObject=0xbc) returned 1 [0142.713] CloseHandle (hObject=0xbc) returned 1 [0142.726] CloseHandle (hObject=0xbc) returned 1 [0142.728] CloseHandle (hObject=0xbc) returned 1 [0142.730] CloseHandle (hObject=0xbc) returned 1 [0142.734] CloseHandle (hObject=0xbc) returned 1 [0142.738] CloseHandle (hObject=0xbc) returned 1 [0142.742] CloseHandle (hObject=0xbc) returned 1 [0142.749] CloseHandle (hObject=0xbc) returned 1 [0142.750] CloseHandle (hObject=0xbc) returned 1 [0142.752] CloseHandle (hObject=0xbc) returned 1 [0142.756] CloseHandle (hObject=0xbc) returned 1 [0142.757] CloseHandle (hObject=0xbc) returned 1 [0142.760] CloseHandle (hObject=0xbc) returned 1 [0142.763] CloseHandle (hObject=0xbc) returned 1 [0142.765] CloseHandle (hObject=0xbc) returned 1 [0142.767] CloseHandle (hObject=0xbc) returned 1 [0142.773] CloseHandle (hObject=0xbc) returned 1 [0142.775] CloseHandle (hObject=0xbc) returned 1 [0142.778] CloseHandle (hObject=0xbc) returned 1 [0142.781] CloseHandle (hObject=0xbc) returned 1 [0142.782] CloseHandle (hObject=0xbc) returned 1 [0142.784] CloseHandle (hObject=0xbc) returned 1 [0142.792] CloseHandle (hObject=0xbc) returned 1 [0142.793] CloseHandle (hObject=0xbc) returned 1 [0142.796] CloseHandle (hObject=0xbc) returned 1 [0142.802] CloseHandle (hObject=0xbc) returned 1 [0142.804] CloseHandle (hObject=0xbc) returned 1 [0142.807] CloseHandle (hObject=0xbc) returned 1 [0142.819] CloseHandle (hObject=0xbc) returned 1 [0142.820] CloseHandle (hObject=0xbc) returned 1 [0142.827] CloseHandle (hObject=0xbc) returned 1 [0142.832] CloseHandle (hObject=0xbc) returned 1 [0142.834] CloseHandle (hObject=0xbc) returned 1 [0142.835] CloseHandle (hObject=0xbc) returned 1 [0142.845] CloseHandle (hObject=0xbc) returned 1 [0142.847] CloseHandle (hObject=0xbc) returned 1 [0142.850] CloseHandle (hObject=0xbc) returned 1 [0142.860] CloseHandle (hObject=0xbc) returned 1 [0142.863] CloseHandle (hObject=0xbc) returned 1 [0142.865] CloseHandle (hObject=0xb8) returned 1 [0142.870] CloseHandle (hObject=0xb8) returned 1 [0142.872] CloseHandle (hObject=0xb8) returned 1 [0142.874] CloseHandle (hObject=0xb0) returned 1 [0142.877] CloseHandle (hObject=0xb0) returned 1 [0142.880] CloseHandle (hObject=0xb0) returned 1 [0142.899] CloseHandle (hObject=0xb4) returned 1 [0142.901] CloseHandle (hObject=0xb4) returned 1 [0142.911] CloseHandle (hObject=0xb4) returned 1 [0142.935] CloseHandle (hObject=0xb8) returned 1 [0142.936] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.cryptoid"), dwFlags=0x2) returned 1 [0142.938] CloseHandle (hObject=0xb8) returned 1 [0142.939] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.cryptoid"), dwFlags=0x2) returned 1 [0142.941] CloseHandle (hObject=0xb8) returned 1 [0142.941] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.cryptoid"), dwFlags=0x2) returned 1 [0142.958] CloseHandle (hObject=0xb8) returned 1 [0142.974] CloseHandle (hObject=0xb8) returned 1 [0142.976] CloseHandle (hObject=0xb8) returned 1 [0142.977] CloseHandle (hObject=0xbc) returned 1 [0142.979] CloseHandle (hObject=0xbc) returned 1 [0142.981] CloseHandle (hObject=0xbc) returned 1 [0142.982] CloseHandle (hObject=0xbc) returned 1 [0142.985] CloseHandle (hObject=0xbc) returned 1 [0142.986] CloseHandle (hObject=0xbc) returned 1 [0142.988] CloseHandle (hObject=0xbc) returned 1 [0142.994] CloseHandle (hObject=0xbc) returned 1 [0142.995] CloseHandle (hObject=0xbc) returned 1 [0142.997] CloseHandle (hObject=0xbc) returned 1 [0143.009] CloseHandle (hObject=0xbc) returned 1 [0143.010] CloseHandle (hObject=0xbc) returned 1 [0143.012] CloseHandle (hObject=0xbc) returned 1 [0143.023] CloseHandle (hObject=0xbc) returned 1 [0143.025] CloseHandle (hObject=0xbc) returned 1 [0143.028] CloseHandle (hObject=0xbc) returned 1 [0143.030] CloseHandle (hObject=0xbc) returned 1 [0143.032] CloseHandle (hObject=0xbc) returned 1 [0143.034] CloseHandle (hObject=0xbc) returned 1 [0143.043] CloseHandle (hObject=0xbc) returned 1 [0143.044] CloseHandle (hObject=0xbc) returned 1 [0143.049] CloseHandle (hObject=0xbc) returned 1 [0143.052] CloseHandle (hObject=0xbc) returned 1 [0143.054] CloseHandle (hObject=0xbc) returned 1 [0143.058] CloseHandle (hObject=0xbc) returned 1 [0143.061] CloseHandle (hObject=0xbc) returned 1 [0143.063] CloseHandle (hObject=0xbc) returned 1 [0143.066] CloseHandle (hObject=0xbc) returned 1 [0143.069] CloseHandle (hObject=0xbc) returned 1 [0143.071] CloseHandle (hObject=0xbc) returned 1 [0143.073] CloseHandle (hObject=0xbc) returned 1 [0143.075] CloseHandle (hObject=0xbc) returned 1 [0143.079] CloseHandle (hObject=0xbc) returned 1 [0143.081] CloseHandle (hObject=0xbc) returned 1 [0143.100] CloseHandle (hObject=0xbc) returned 1 [0143.102] CloseHandle (hObject=0xbc) returned 1 [0143.104] CloseHandle (hObject=0xbc) returned 1 [0143.107] CloseHandle (hObject=0xbc) returned 1 [0143.109] CloseHandle (hObject=0xbc) returned 1 [0143.112] CloseHandle (hObject=0xbc) returned 1 [0143.124] CloseHandle (hObject=0xbc) returned 1 [0143.125] CloseHandle (hObject=0xbc) returned 1 [0143.127] CloseHandle (hObject=0xbc) returned 1 [0143.131] CloseHandle (hObject=0xbc) returned 1 [0143.132] CloseHandle (hObject=0xbc) returned 1 [0143.135] CloseHandle (hObject=0xbc) returned 1 [0143.142] CloseHandle (hObject=0xbc) returned 1 [0143.143] CloseHandle (hObject=0xbc) returned 1 [0143.145] CloseHandle (hObject=0xbc) returned 1 [0143.147] CloseHandle (hObject=0xbc) returned 1 [0143.149] CloseHandle (hObject=0xbc) returned 1 [0143.151] CloseHandle (hObject=0xbc) returned 1 [0143.158] CloseHandle (hObject=0xbc) returned 1 [0143.160] CloseHandle (hObject=0xbc) returned 1 [0143.163] CloseHandle (hObject=0xbc) returned 1 [0143.167] CloseHandle (hObject=0xbc) returned 1 [0143.169] CloseHandle (hObject=0xbc) returned 1 [0143.172] CloseHandle (hObject=0xbc) returned 1 [0143.194] CloseHandle (hObject=0xbc) returned 1 [0143.196] CloseHandle (hObject=0xbc) returned 1 [0143.197] CloseHandle (hObject=0xbc) returned 1 [0143.217] CloseHandle (hObject=0xbc) returned 1 [0143.220] CloseHandle (hObject=0xbc) returned 1 [0143.222] CloseHandle (hObject=0xbc) returned 1 [0143.225] CloseHandle (hObject=0xbc) returned 1 [0143.227] CloseHandle (hObject=0xbc) returned 1 [0143.229] CloseHandle (hObject=0xbc) returned 1 [0143.241] CloseHandle (hObject=0xbc) returned 1 [0143.243] CloseHandle (hObject=0xbc) returned 1 [0143.246] CloseHandle (hObject=0xbc) returned 1 [0143.249] CloseHandle (hObject=0xbc) returned 1 [0143.253] CloseHandle (hObject=0xbc) returned 1 [0143.254] CloseHandle (hObject=0xbc) returned 1 [0143.260] CloseHandle (hObject=0xbc) returned 1 [0143.262] CloseHandle (hObject=0xbc) returned 1 [0143.265] CloseHandle (hObject=0xbc) returned 1 [0143.268] CloseHandle (hObject=0xbc) returned 1 [0143.271] CloseHandle (hObject=0xbc) returned 1 [0143.273] CloseHandle (hObject=0xbc) returned 1 [0143.277] CloseHandle (hObject=0xbc) returned 1 [0143.279] CloseHandle (hObject=0xbc) returned 1 [0143.281] CloseHandle (hObject=0xbc) returned 1 [0143.289] CloseHandle (hObject=0xbc) returned 1 [0143.291] CloseHandle (hObject=0xbc) returned 1 [0143.292] CloseHandle (hObject=0xbc) returned 1 [0143.295] CloseHandle (hObject=0xbc) returned 1 [0143.297] CloseHandle (hObject=0xbc) returned 1 [0143.300] CloseHandle (hObject=0xbc) returned 1 [0143.308] CloseHandle (hObject=0xbc) returned 1 [0143.309] CloseHandle (hObject=0xbc) returned 1 [0143.311] CloseHandle (hObject=0xbc) returned 1 [0143.318] CloseHandle (hObject=0xbc) returned 1 [0143.320] CloseHandle (hObject=0xbc) returned 1 [0143.322] CloseHandle (hObject=0xbc) returned 1 [0143.325] CloseHandle (hObject=0xbc) returned 1 [0143.327] CloseHandle (hObject=0xbc) returned 1 [0143.329] CloseHandle (hObject=0xbc) returned 1 [0143.342] CloseHandle (hObject=0xbc) returned 1 [0143.344] CloseHandle (hObject=0xbc) returned 1 [0143.347] CloseHandle (hObject=0xbc) returned 1 [0143.350] CloseHandle (hObject=0xbc) returned 1 [0143.352] CloseHandle (hObject=0xbc) returned 1 [0143.354] CloseHandle (hObject=0xbc) returned 1 [0143.367] CloseHandle (hObject=0xbc) returned 1 [0143.368] CloseHandle (hObject=0xbc) returned 1 [0143.371] CloseHandle (hObject=0xbc) returned 1 [0143.374] CloseHandle (hObject=0xbc) returned 1 [0143.377] CloseHandle (hObject=0xbc) returned 1 [0143.379] CloseHandle (hObject=0xbc) returned 1 [0143.394] CloseHandle (hObject=0xbc) returned 1 [0143.396] CloseHandle (hObject=0xbc) returned 1 [0143.399] CloseHandle (hObject=0xbc) returned 1 [0143.403] CloseHandle (hObject=0xbc) returned 1 [0143.404] CloseHandle (hObject=0xbc) returned 1 [0143.406] CloseHandle (hObject=0xbc) returned 1 [0143.410] CloseHandle (hObject=0xbc) returned 1 [0143.412] CloseHandle (hObject=0xbc) returned 1 [0143.415] CloseHandle (hObject=0xbc) returned 1 [0143.429] CloseHandle (hObject=0xbc) returned 1 [0143.431] CloseHandle (hObject=0xbc) returned 1 [0143.433] CloseHandle (hObject=0xbc) returned 1 [0143.436] CloseHandle (hObject=0xbc) returned 1 [0143.439] CloseHandle (hObject=0xbc) returned 1 [0143.442] CloseHandle (hObject=0xbc) returned 1 [0143.455] CloseHandle (hObject=0xbc) returned 1 [0143.456] CloseHandle (hObject=0xbc) returned 1 [0143.460] CloseHandle (hObject=0xb8) returned 1 [0143.462] CloseHandle (hObject=0xb8) returned 1 [0143.464] CloseHandle (hObject=0xb8) returned 1 [0143.465] CloseHandle (hObject=0xb0) returned 1 [0143.472] CloseHandle (hObject=0xb0) returned 1 [0143.475] CloseHandle (hObject=0xb0) returned 1 [0143.493] CloseHandle (hObject=0xb4) returned 1 [0143.494] CloseHandle (hObject=0xb4) returned 1 [0143.496] CloseHandle (hObject=0xb4) returned 1 [0143.523] CloseHandle (hObject=0xb8) returned 1 [0143.524] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.cryptoid"), dwFlags=0x2) returned 1 [0143.545] CloseHandle (hObject=0xb8) returned 1 [0143.545] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.cryptoid"), dwFlags=0x2) returned 1 [0143.593] CloseHandle (hObject=0xb8) returned 1 [0143.593] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.cryptoid"), dwFlags=0x2) returned 1 [0143.596] CloseHandle (hObject=0xb8) returned 1 [0143.597] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.cryptoid"), dwFlags=0x2) returned 1 [0143.604] CloseHandle (hObject=0xb8) returned 1 [0143.606] CloseHandle (hObject=0xb8) returned 1 [0143.608] CloseHandle (hObject=0xb8) returned 1 [0143.611] CloseHandle (hObject=0xbc) returned 1 [0143.623] CloseHandle (hObject=0xbc) returned 1 [0143.625] CloseHandle (hObject=0xbc) returned 1 [0143.627] CloseHandle (hObject=0xbc) returned 1 [0143.631] CloseHandle (hObject=0xbc) returned 1 [0143.633] CloseHandle (hObject=0xbc) returned 1 [0143.636] CloseHandle (hObject=0xbc) returned 1 [0143.639] CloseHandle (hObject=0xbc) returned 1 [0143.644] CloseHandle (hObject=0xbc) returned 1 [0143.648] CloseHandle (hObject=0xbc) returned 1 [0143.655] CloseHandle (hObject=0xbc) returned 1 [0143.657] CloseHandle (hObject=0xbc) returned 1 [0143.663] CloseHandle (hObject=0xbc) returned 1 [0143.672] CloseHandle (hObject=0xbc) returned 1 [0143.675] CloseHandle (hObject=0xbc) returned 1 [0143.678] CloseHandle (hObject=0xbc) returned 1 [0143.682] CloseHandle (hObject=0xbc) returned 1 [0143.686] CloseHandle (hObject=0xbc) returned 1 [0143.688] CloseHandle (hObject=0xbc) returned 1 [0143.699] CloseHandle (hObject=0xbc) returned 1 [0143.700] CloseHandle (hObject=0xbc) returned 1 [0143.703] CloseHandle (hObject=0xbc) returned 1 [0143.709] CloseHandle (hObject=0xbc) returned 1 [0143.711] CloseHandle (hObject=0xbc) returned 1 [0143.714] CloseHandle (hObject=0xbc) returned 1 [0143.726] CloseHandle (hObject=0xbc) returned 1 [0143.729] CloseHandle (hObject=0xbc) returned 1 [0143.731] CloseHandle (hObject=0xbc) returned 1 [0143.735] CloseHandle (hObject=0xbc) returned 1 [0143.737] CloseHandle (hObject=0xbc) returned 1 [0143.738] CloseHandle (hObject=0xbc) returned 1 [0143.743] CloseHandle (hObject=0xbc) returned 1 [0143.745] CloseHandle (hObject=0xbc) returned 1 [0143.747] CloseHandle (hObject=0xbc) returned 1 [0143.756] CloseHandle (hObject=0xbc) returned 1 [0143.758] CloseHandle (hObject=0xbc) returned 1 [0143.759] CloseHandle (hObject=0xbc) returned 1 [0143.761] CloseHandle (hObject=0xbc) returned 1 [0143.763] CloseHandle (hObject=0xbc) returned 1 [0143.765] CloseHandle (hObject=0xbc) returned 1 [0143.776] CloseHandle (hObject=0xbc) returned 1 [0143.778] CloseHandle (hObject=0xbc) returned 1 [0143.780] CloseHandle (hObject=0xbc) returned 1 [0143.783] CloseHandle (hObject=0xbc) returned 1 [0143.785] CloseHandle (hObject=0xbc) returned 1 [0143.789] CloseHandle (hObject=0xbc) returned 1 [0143.796] CloseHandle (hObject=0xbc) returned 1 [0143.797] CloseHandle (hObject=0xbc) returned 1 [0143.801] CloseHandle (hObject=0xbc) returned 1 [0143.804] CloseHandle (hObject=0xbc) returned 1 [0143.807] CloseHandle (hObject=0xbc) returned 1 [0143.809] CloseHandle (hObject=0xbc) returned 1 [0143.816] CloseHandle (hObject=0xbc) returned 1 [0143.818] CloseHandle (hObject=0xbc) returned 1 [0143.820] CloseHandle (hObject=0xbc) returned 1 [0143.835] CloseHandle (hObject=0xbc) returned 1 [0143.838] CloseHandle (hObject=0xbc) returned 1 [0143.841] CloseHandle (hObject=0xbc) returned 1 [0143.845] CloseHandle (hObject=0xbc) returned 1 [0143.847] CloseHandle (hObject=0xbc) returned 1 [0143.852] CloseHandle (hObject=0xbc) returned 1 [0143.864] CloseHandle (hObject=0xbc) returned 1 [0143.866] CloseHandle (hObject=0xbc) returned 1 [0143.868] CloseHandle (hObject=0xbc) returned 1 [0143.872] CloseHandle (hObject=0xbc) returned 1 [0143.874] CloseHandle (hObject=0xbc) returned 1 [0143.876] CloseHandle (hObject=0xbc) returned 1 [0143.895] CloseHandle (hObject=0xbc) returned 1 [0143.897] CloseHandle (hObject=0xbc) returned 1 [0143.900] CloseHandle (hObject=0xbc) returned 1 [0143.913] CloseHandle (hObject=0xbc) returned 1 [0143.916] CloseHandle (hObject=0xbc) returned 1 [0143.919] CloseHandle (hObject=0xbc) returned 1 [0143.922] CloseHandle (hObject=0xbc) returned 1 [0143.923] CloseHandle (hObject=0xbc) returned 1 [0143.926] CloseHandle (hObject=0xbc) returned 1 [0143.933] CloseHandle (hObject=0xbc) returned 1 [0143.935] CloseHandle (hObject=0xbc) returned 1 [0143.936] CloseHandle (hObject=0xbc) returned 1 [0143.939] CloseHandle (hObject=0xbc) returned 1 [0143.942] CloseHandle (hObject=0xbc) returned 1 [0143.944] CloseHandle (hObject=0xbc) returned 1 [0143.947] CloseHandle (hObject=0xbc) returned 1 [0143.948] CloseHandle (hObject=0xbc) returned 1 [0143.951] CloseHandle (hObject=0xbc) returned 1 [0143.954] CloseHandle (hObject=0xbc) returned 1 [0143.955] CloseHandle (hObject=0xbc) returned 1 [0143.957] CloseHandle (hObject=0xbc) returned 1 [0143.960] CloseHandle (hObject=0xbc) returned 1 [0143.962] CloseHandle (hObject=0xbc) returned 1 [0143.964] CloseHandle (hObject=0xbc) returned 1 [0143.970] CloseHandle (hObject=0xbc) returned 1 [0143.972] CloseHandle (hObject=0xbc) returned 1 [0143.974] CloseHandle (hObject=0xbc) returned 1 [0143.978] CloseHandle (hObject=0xbc) returned 1 [0143.979] CloseHandle (hObject=0xbc) returned 1 [0143.982] CloseHandle (hObject=0xbc) returned 1 [0143.985] CloseHandle (hObject=0xbc) returned 1 [0143.987] CloseHandle (hObject=0xbc) returned 1 [0143.989] CloseHandle (hObject=0xbc) returned 1 [0143.992] CloseHandle (hObject=0xbc) returned 1 [0143.993] CloseHandle (hObject=0xbc) returned 1 [0143.997] CloseHandle (hObject=0xbc) returned 1 [0144.000] CloseHandle (hObject=0xbc) returned 1 [0144.001] CloseHandle (hObject=0xbc) returned 1 [0144.003] CloseHandle (hObject=0xbc) returned 1 [0144.007] CloseHandle (hObject=0xbc) returned 1 [0144.008] CloseHandle (hObject=0xbc) returned 1 [0144.010] CloseHandle (hObject=0xbc) returned 1 [0144.022] CloseHandle (hObject=0xbc) returned 1 [0144.024] CloseHandle (hObject=0xbc) returned 1 [0144.026] CloseHandle (hObject=0xbc) returned 1 [0144.028] CloseHandle (hObject=0xbc) returned 1 [0144.029] CloseHandle (hObject=0xbc) returned 1 [0144.034] CloseHandle (hObject=0xbc) returned 1 [0144.046] CloseHandle (hObject=0xbc) returned 1 [0144.049] CloseHandle (hObject=0xbc) returned 1 [0144.050] CloseHandle (hObject=0xbc) returned 1 [0144.054] CloseHandle (hObject=0xbc) returned 1 [0144.055] CloseHandle (hObject=0xbc) returned 1 [0144.057] CloseHandle (hObject=0xbc) returned 1 [0144.060] CloseHandle (hObject=0xbc) returned 1 [0144.062] CloseHandle (hObject=0xbc) returned 1 [0144.064] CloseHandle (hObject=0xbc) returned 1 [0144.066] CloseHandle (hObject=0xbc) returned 1 [0144.068] CloseHandle (hObject=0xbc) returned 1 [0144.070] CloseHandle (hObject=0xbc) returned 1 [0144.077] CloseHandle (hObject=0xbc) returned 1 [0144.078] CloseHandle (hObject=0xbc) returned 1 [0144.080] CloseHandle (hObject=0xbc) returned 1 [0144.098] CloseHandle (hObject=0xbc) returned 1 [0144.099] CloseHandle (hObject=0xbc) returned 1 [0144.102] CloseHandle (hObject=0xbc) returned 1 [0144.107] CloseHandle (hObject=0xbc) returned 1 [0144.108] CloseHandle (hObject=0xbc) returned 1 [0144.110] CloseHandle (hObject=0xbc) returned 1 [0144.112] CloseHandle (hObject=0xbc) returned 1 [0144.116] CloseHandle (hObject=0xbc) returned 1 [0144.118] CloseHandle (hObject=0xbc) returned 1 [0144.122] CloseHandle (hObject=0xbc) returned 1 [0144.124] CloseHandle (hObject=0xbc) returned 1 [0144.126] CloseHandle (hObject=0xbc) returned 1 [0144.128] CloseHandle (hObject=0xbc) returned 1 [0144.130] CloseHandle (hObject=0xbc) returned 1 [0144.133] CloseHandle (hObject=0xbc) returned 1 [0144.136] CloseHandle (hObject=0xbc) returned 1 [0144.137] CloseHandle (hObject=0xbc) returned 1 [0144.139] CloseHandle (hObject=0xbc) returned 1 [0144.142] CloseHandle (hObject=0xbc) returned 1 [0144.143] CloseHandle (hObject=0xbc) returned 1 [0144.145] CloseHandle (hObject=0xbc) returned 1 [0144.155] CloseHandle (hObject=0xbc) returned 1 [0144.157] CloseHandle (hObject=0xbc) returned 1 [0144.158] CloseHandle (hObject=0xbc) returned 1 [0144.164] CloseHandle (hObject=0xbc) returned 1 [0144.166] CloseHandle (hObject=0xbc) returned 1 [0144.168] CloseHandle (hObject=0xbc) returned 1 [0144.171] CloseHandle (hObject=0xbc) returned 1 [0144.173] CloseHandle (hObject=0xbc) returned 1 [0144.175] CloseHandle (hObject=0xbc) returned 1 [0144.178] CloseHandle (hObject=0xbc) returned 1 [0144.179] CloseHandle (hObject=0xbc) returned 1 [0144.183] CloseHandle (hObject=0xbc) returned 1 [0144.192] CloseHandle (hObject=0xbc) returned 1 [0144.194] CloseHandle (hObject=0xbc) returned 1 [0144.195] CloseHandle (hObject=0xbc) returned 1 [0144.197] CloseHandle (hObject=0xbc) returned 1 [0144.198] CloseHandle (hObject=0xbc) returned 1 [0144.200] CloseHandle (hObject=0xbc) returned 1 [0144.211] CloseHandle (hObject=0xbc) returned 1 [0144.213] CloseHandle (hObject=0xbc) returned 1 [0144.215] CloseHandle (hObject=0xbc) returned 1 [0144.217] CloseHandle (hObject=0xbc) returned 1 [0144.218] CloseHandle (hObject=0xbc) returned 1 [0144.220] CloseHandle (hObject=0xbc) returned 1 [0144.229] CloseHandle (hObject=0xbc) returned 1 [0144.230] CloseHandle (hObject=0xbc) returned 1 [0144.231] CloseHandle (hObject=0xbc) returned 1 [0144.234] CloseHandle (hObject=0xbc) returned 1 [0144.236] CloseHandle (hObject=0xbc) returned 1 [0144.238] CloseHandle (hObject=0xbc) returned 1 [0144.249] CloseHandle (hObject=0xbc) returned 1 [0144.251] CloseHandle (hObject=0xbc) returned 1 [0144.253] CloseHandle (hObject=0xbc) returned 1 [0144.255] CloseHandle (hObject=0xbc) returned 1 [0144.257] CloseHandle (hObject=0xbc) returned 1 [0144.259] CloseHandle (hObject=0xbc) returned 1 [0144.262] CloseHandle (hObject=0xbc) returned 1 [0144.264] CloseHandle (hObject=0xbc) returned 1 [0144.265] CloseHandle (hObject=0xbc) returned 1 [0144.268] CloseHandle (hObject=0xbc) returned 1 [0144.270] CloseHandle (hObject=0xbc) returned 1 [0144.272] CloseHandle (hObject=0xbc) returned 1 [0144.281] CloseHandle (hObject=0xbc) returned 1 [0144.282] CloseHandle (hObject=0xbc) returned 1 [0144.284] CloseHandle (hObject=0xbc) returned 1 [0144.287] CloseHandle (hObject=0xbc) returned 1 [0144.289] CloseHandle (hObject=0xbc) returned 1 [0144.294] CloseHandle (hObject=0xbc) returned 1 [0144.303] CloseHandle (hObject=0xbc) returned 1 [0144.304] CloseHandle (hObject=0xbc) returned 1 [0144.306] CloseHandle (hObject=0xbc) returned 1 [0144.308] CloseHandle (hObject=0xbc) returned 1 [0144.309] CloseHandle (hObject=0xbc) returned 1 [0144.310] CloseHandle (hObject=0xbc) returned 1 [0144.320] CloseHandle (hObject=0xbc) returned 1 [0144.321] CloseHandle (hObject=0xbc) returned 1 [0144.325] CloseHandle (hObject=0xb8) returned 1 [0144.326] CloseHandle (hObject=0xb8) returned 1 [0144.327] CloseHandle (hObject=0xb8) returned 1 [0144.342] CloseHandle (hObject=0xb4) returned 1 [0144.343] CloseHandle (hObject=0xb4) returned 1 [0144.344] CloseHandle (hObject=0xb4) returned 1 [0144.352] CloseHandle (hObject=0xb8) returned 1 [0144.352] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png.cryptoid"), dwFlags=0x2) returned 1 [0144.360] CloseHandle (hObject=0xb8) returned 1 [0144.360] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js.cryptoid"), dwFlags=0x2) returned 1 [0144.406] CloseHandle (hObject=0xb8) returned 1 [0144.406] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js.cryptoid"), dwFlags=0x2) returned 1 [0144.408] CloseHandle (hObject=0xb8) returned 1 [0144.408] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js.cryptoid"), dwFlags=0x2) returned 1 [0144.427] CloseHandle (hObject=0xb8) returned 1 [0144.428] CloseHandle (hObject=0xb8) returned 1 [0144.429] CloseHandle (hObject=0xb8) returned 1 [0144.432] CloseHandle (hObject=0xbc) returned 1 [0144.445] CloseHandle (hObject=0xbc) returned 1 [0144.446] CloseHandle (hObject=0xbc) returned 1 [0144.448] CloseHandle (hObject=0xbc) returned 1 [0144.450] CloseHandle (hObject=0xbc) returned 1 [0144.452] CloseHandle (hObject=0xbc) returned 1 [0144.453] CloseHandle (hObject=0xbc) returned 1 [0144.458] CloseHandle (hObject=0xbc) returned 1 [0144.460] CloseHandle (hObject=0xbc) returned 1 [0144.462] CloseHandle (hObject=0xbc) returned 1 [0144.464] CloseHandle (hObject=0xbc) returned 1 [0144.465] CloseHandle (hObject=0xbc) returned 1 [0144.466] CloseHandle (hObject=0xbc) returned 1 [0144.475] CloseHandle (hObject=0xbc) returned 1 [0144.476] CloseHandle (hObject=0xbc) returned 1 [0144.478] CloseHandle (hObject=0xbc) returned 1 [0144.480] CloseHandle (hObject=0xbc) returned 1 [0144.482] CloseHandle (hObject=0xbc) returned 1 [0144.483] CloseHandle (hObject=0xbc) returned 1 [0144.496] CloseHandle (hObject=0xbc) returned 1 [0144.498] CloseHandle (hObject=0xbc) returned 1 [0144.499] CloseHandle (hObject=0xbc) returned 1 [0144.501] CloseHandle (hObject=0xbc) returned 1 [0144.502] CloseHandle (hObject=0xbc) returned 1 [0144.503] CloseHandle (hObject=0xbc) returned 1 [0144.510] CloseHandle (hObject=0xbc) returned 1 [0144.512] CloseHandle (hObject=0xbc) returned 1 [0144.513] CloseHandle (hObject=0xbc) returned 1 [0144.516] CloseHandle (hObject=0xbc) returned 1 [0144.517] CloseHandle (hObject=0xbc) returned 1 [0144.519] CloseHandle (hObject=0xbc) returned 1 [0144.523] CloseHandle (hObject=0xbc) returned 1 [0144.524] CloseHandle (hObject=0xbc) returned 1 [0144.526] CloseHandle (hObject=0xbc) returned 1 [0144.529] CloseHandle (hObject=0xbc) returned 1 [0144.530] CloseHandle (hObject=0xbc) returned 1 [0144.532] CloseHandle (hObject=0xbc) returned 1 [0144.533] CloseHandle (hObject=0xbc) returned 1 [0144.534] CloseHandle (hObject=0xbc) returned 1 [0144.540] CloseHandle (hObject=0xbc) returned 1 [0144.543] CloseHandle (hObject=0xbc) returned 1 [0144.544] CloseHandle (hObject=0xbc) returned 1 [0144.547] CloseHandle (hObject=0xbc) returned 1 [0144.558] CloseHandle (hObject=0xbc) returned 1 [0144.559] CloseHandle (hObject=0xbc) returned 1 [0144.561] CloseHandle (hObject=0xbc) returned 1 [0144.564] CloseHandle (hObject=0xbc) returned 1 [0144.566] CloseHandle (hObject=0xbc) returned 1 [0144.569] CloseHandle (hObject=0xbc) returned 1 [0144.582] CloseHandle (hObject=0xbc) returned 1 [0144.584] CloseHandle (hObject=0xbc) returned 1 [0144.586] CloseHandle (hObject=0xbc) returned 1 [0144.589] CloseHandle (hObject=0xbc) returned 1 [0144.591] CloseHandle (hObject=0xbc) returned 1 [0144.593] CloseHandle (hObject=0xbc) returned 1 [0144.597] CloseHandle (hObject=0xbc) returned 1 [0144.598] CloseHandle (hObject=0xbc) returned 1 [0144.601] CloseHandle (hObject=0xbc) returned 1 [0144.604] CloseHandle (hObject=0xbc) returned 1 [0144.606] CloseHandle (hObject=0xbc) returned 1 [0144.608] CloseHandle (hObject=0xbc) returned 1 [0144.616] CloseHandle (hObject=0xbc) returned 1 [0144.618] CloseHandle (hObject=0xbc) returned 1 [0144.623] CloseHandle (hObject=0xbc) returned 1 [0144.626] CloseHandle (hObject=0xbc) returned 1 [0144.628] CloseHandle (hObject=0xbc) returned 1 [0144.630] CloseHandle (hObject=0xbc) returned 1 [0144.642] CloseHandle (hObject=0xbc) returned 1 [0144.644] CloseHandle (hObject=0xbc) returned 1 [0144.646] CloseHandle (hObject=0xbc) returned 1 [0144.649] CloseHandle (hObject=0xbc) returned 1 [0144.651] CloseHandle (hObject=0xbc) returned 1 [0144.654] CloseHandle (hObject=0xbc) returned 1 [0144.662] CloseHandle (hObject=0xbc) returned 1 [0144.664] CloseHandle (hObject=0xbc) returned 1 [0144.666] CloseHandle (hObject=0xbc) returned 1 [0144.669] CloseHandle (hObject=0xbc) returned 1 [0144.671] CloseHandle (hObject=0xbc) returned 1 [0144.675] CloseHandle (hObject=0xbc) returned 1 [0144.778] CloseHandle (hObject=0xbc) returned 1 [0144.779] CloseHandle (hObject=0xbc) returned 1 [0144.781] CloseHandle (hObject=0xbc) returned 1 [0144.784] CloseHandle (hObject=0xbc) returned 1 [0144.785] CloseHandle (hObject=0xbc) returned 1 [0144.788] CloseHandle (hObject=0xbc) returned 1 [0144.872] CloseHandle (hObject=0xbc) returned 1 [0144.873] CloseHandle (hObject=0xbc) returned 1 [0144.875] CloseHandle (hObject=0xbc) returned 1 [0144.877] CloseHandle (hObject=0xbc) returned 1 [0144.878] CloseHandle (hObject=0xbc) returned 1 [0144.883] CloseHandle (hObject=0xbc) returned 1 [0144.951] CloseHandle (hObject=0xbc) returned 1 [0144.952] CloseHandle (hObject=0xbc) returned 1 [0144.954] CloseHandle (hObject=0xbc) returned 1 [0144.958] CloseHandle (hObject=0xbc) returned 1 [0144.960] CloseHandle (hObject=0xbc) returned 1 [0144.963] CloseHandle (hObject=0xbc) returned 1 [0145.029] CloseHandle (hObject=0xbc) returned 1 [0145.032] CloseHandle (hObject=0xbc) returned 1 [0145.034] CloseHandle (hObject=0xbc) returned 1 [0145.038] CloseHandle (hObject=0xbc) returned 1 [0145.040] CloseHandle (hObject=0xbc) returned 1 [0145.043] CloseHandle (hObject=0xbc) returned 1 [0145.096] CloseHandle (hObject=0xbc) returned 1 [0145.098] CloseHandle (hObject=0xbc) returned 1 [0145.100] CloseHandle (hObject=0xbc) returned 1 [0145.102] CloseHandle (hObject=0xbc) returned 1 [0145.104] CloseHandle (hObject=0xbc) returned 1 [0145.106] CloseHandle (hObject=0xbc) returned 1 [0145.125] CloseHandle (hObject=0xbc) returned 1 [0145.126] CloseHandle (hObject=0xbc) returned 1 [0145.129] CloseHandle (hObject=0xbc) returned 1 [0145.132] CloseHandle (hObject=0xbc) returned 1 [0145.134] CloseHandle (hObject=0xbc) returned 1 [0145.137] CloseHandle (hObject=0xbc) returned 1 [0145.169] CloseHandle (hObject=0xbc) returned 1 [0145.171] CloseHandle (hObject=0xbc) returned 1 [0145.173] CloseHandle (hObject=0xbc) returned 1 [0145.178] CloseHandle (hObject=0xbc) returned 1 [0145.180] CloseHandle (hObject=0xbc) returned 1 [0145.183] CloseHandle (hObject=0xbc) returned 1 [0145.235] CloseHandle (hObject=0xbc) returned 1 [0145.236] CloseHandle (hObject=0xbc) returned 1 [0145.240] CloseHandle (hObject=0xbc) returned 1 [0145.243] CloseHandle (hObject=0xbc) returned 1 [0145.245] CloseHandle (hObject=0xbc) returned 1 [0145.247] CloseHandle (hObject=0xbc) returned 1 [0145.312] CloseHandle (hObject=0xbc) returned 1 [0145.314] CloseHandle (hObject=0xbc) returned 1 [0145.316] CloseHandle (hObject=0xbc) returned 1 [0145.318] CloseHandle (hObject=0xbc) returned 1 [0145.321] CloseHandle (hObject=0xbc) returned 1 [0145.323] CloseHandle (hObject=0xbc) returned 1 [0145.334] CloseHandle (hObject=0xbc) returned 1 [0145.337] CloseHandle (hObject=0xbc) returned 1 [0145.339] CloseHandle (hObject=0xbc) returned 1 [0145.344] CloseHandle (hObject=0xbc) returned 1 [0145.346] CloseHandle (hObject=0xbc) returned 1 [0145.349] CloseHandle (hObject=0xbc) returned 1 [0145.382] CloseHandle (hObject=0xbc) returned 1 [0145.383] CloseHandle (hObject=0xbc) returned 1 [0145.385] CloseHandle (hObject=0xbc) returned 1 [0145.388] CloseHandle (hObject=0xbc) returned 1 [0145.390] CloseHandle (hObject=0xbc) returned 1 [0145.392] CloseHandle (hObject=0xbc) returned 1 [0145.493] CloseHandle (hObject=0xbc) returned 1 [0145.494] CloseHandle (hObject=0xbc) returned 1 [0145.496] CloseHandle (hObject=0xbc) returned 1 [0145.498] CloseHandle (hObject=0xbc) returned 1 [0145.499] CloseHandle (hObject=0xbc) returned 1 [0145.502] CloseHandle (hObject=0xbc) returned 1 [0145.504] CloseHandle (hObject=0xbc) returned 1 [0145.505] CloseHandle (hObject=0xbc) returned 1 [0145.507] CloseHandle (hObject=0xbc) returned 1 [0145.518] CloseHandle (hObject=0xbc) returned 1 [0145.519] CloseHandle (hObject=0xbc) returned 1 [0145.523] CloseHandle (hObject=0xbc) returned 1 [0145.526] CloseHandle (hObject=0xbc) returned 1 [0145.535] CloseHandle (hObject=0xbc) returned 1 [0145.537] CloseHandle (hObject=0xbc) returned 1 [0145.540] CloseHandle (hObject=0xbc) returned 1 [0145.542] CloseHandle (hObject=0xbc) returned 1 [0145.546] CloseHandle (hObject=0xbc) returned 1 [0145.550] CloseHandle (hObject=0xbc) returned 1 [0145.553] CloseHandle (hObject=0xbc) returned 1 [0145.555] CloseHandle (hObject=0xbc) returned 1 [0145.562] CloseHandle (hObject=0xbc) returned 1 [0145.563] CloseHandle (hObject=0xbc) returned 1 [0145.568] CloseHandle (hObject=0xbc) returned 1 [0145.576] CloseHandle (hObject=0xbc) returned 1 [0145.578] CloseHandle (hObject=0xbc) returned 1 [0145.579] CloseHandle (hObject=0xbc) returned 1 [0145.585] CloseHandle (hObject=0xbc) returned 1 [0145.586] CloseHandle (hObject=0xbc) returned 1 [0145.588] CloseHandle (hObject=0xbc) returned 1 [0145.592] CloseHandle (hObject=0xbc) returned 1 [0145.593] CloseHandle (hObject=0xbc) returned 1 [0145.595] CloseHandle (hObject=0xbc) returned 1 [0145.604] CloseHandle (hObject=0xbc) returned 1 [0145.606] CloseHandle (hObject=0xbc) returned 1 [0145.608] CloseHandle (hObject=0xbc) returned 1 [0145.611] CloseHandle (hObject=0xbc) returned 1 [0145.612] CloseHandle (hObject=0xbc) returned 1 [0145.615] CloseHandle (hObject=0xbc) returned 1 [0145.618] CloseHandle (hObject=0xbc) returned 1 [0145.619] CloseHandle (hObject=0xbc) returned 1 [0145.622] CloseHandle (hObject=0xbc) returned 1 [0145.624] CloseHandle (hObject=0xbc) returned 1 [0145.626] CloseHandle (hObject=0xbc) returned 1 [0145.627] CloseHandle (hObject=0xbc) returned 1 [0145.631] CloseHandle (hObject=0xbc) returned 1 [0145.632] CloseHandle (hObject=0xbc) returned 1 [0145.634] CloseHandle (hObject=0xbc) returned 1 [0145.641] CloseHandle (hObject=0xbc) returned 1 [0145.643] CloseHandle (hObject=0xbc) returned 1 [0145.645] CloseHandle (hObject=0xbc) returned 1 [0145.648] CloseHandle (hObject=0xbc) returned 1 [0145.649] CloseHandle (hObject=0xbc) returned 1 [0145.651] CloseHandle (hObject=0xbc) returned 1 [0145.665] CloseHandle (hObject=0xbc) returned 1 [0145.667] CloseHandle (hObject=0xbc) returned 1 [0145.668] CloseHandle (hObject=0xbc) returned 1 [0145.671] CloseHandle (hObject=0xbc) returned 1 [0145.673] CloseHandle (hObject=0xbc) returned 1 [0145.675] CloseHandle (hObject=0xbc) returned 1 [0145.684] CloseHandle (hObject=0xbc) returned 1 [0145.686] CloseHandle (hObject=0xbc) returned 1 [0145.688] CloseHandle (hObject=0xb8) returned 1 [0145.690] CloseHandle (hObject=0xb8) returned 1 [0145.691] CloseHandle (hObject=0xb8) returned 1 [0145.693] CloseHandle (hObject=0xb0) returned 1 [0145.697] CloseHandle (hObject=0xb0) returned 1 [0145.698] CloseHandle (hObject=0xb0) returned 1 [0145.716] CloseHandle (hObject=0xb4) returned 1 [0145.719] CloseHandle (hObject=0xb4) returned 1 [0145.720] CloseHandle (hObject=0xb4) returned 1 [0146.681] CloseHandle (hObject=0xb8) returned 1 [0146.746] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.cryptoid"), dwFlags=0x2) returned 1 [0147.068] CloseHandle (hObject=0xb8) returned 1 [0147.068] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.cryptoid"), dwFlags=0x2) returned 1 [0147.071] CloseHandle (hObject=0xb8) returned 1 [0147.074] CloseHandle (hObject=0xb8) returned 1 [0147.075] CloseHandle (hObject=0xb8) returned 1 [0147.077] CloseHandle (hObject=0xb8) returned 1 [0147.080] CloseHandle (hObject=0xb8) returned 1 [0147.082] CloseHandle (hObject=0xb8) returned 1 [0147.094] CloseHandle (hObject=0xb8) returned 1 [0147.096] CloseHandle (hObject=0xb8) returned 1 [0147.107] CloseHandle (hObject=0xb8) returned 1 [0147.218] CloseHandle (hObject=0xbc) returned 1 [0147.219] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.cryptoid"), dwFlags=0x2) returned 1 [0147.241] CloseHandle (hObject=0xbc) returned 1 [0147.241] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.cryptoid"), dwFlags=0x2) returned 1 [0147.246] CloseHandle (hObject=0xbc) returned 1 [0147.246] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.cryptoid"), dwFlags=0x2) returned 1 [0147.250] CloseHandle (hObject=0xbc) returned 1 [0147.251] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.cryptoid"), dwFlags=0x2) returned 1 [0147.254] CloseHandle (hObject=0xbc) returned 1 [0147.255] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.cryptoid"), dwFlags=0x2) returned 1 [0147.258] CloseHandle (hObject=0xbc) returned 1 [0147.258] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.cryptoid"), dwFlags=0x2) returned 1 [0147.261] CloseHandle (hObject=0xbc) returned 1 [0147.262] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.cryptoid"), dwFlags=0x2) returned 1 [0147.264] CloseHandle (hObject=0xbc) returned 1 [0147.265] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.cryptoid"), dwFlags=0x2) returned 1 [0147.274] CloseHandle (hObject=0xb8) returned 1 [0147.277] CloseHandle (hObject=0xb8) returned 1 [0147.279] CloseHandle (hObject=0xb8) returned 1 [0147.282] CloseHandle (hObject=0xbc) returned 1 [0147.285] CloseHandle (hObject=0xbc) returned 1 [0147.287] CloseHandle (hObject=0xbc) returned 1 [0147.290] CloseHandle (hObject=0xbc) returned 1 [0147.293] CloseHandle (hObject=0xbc) returned 1 [0147.295] CloseHandle (hObject=0xbc) returned 1 [0147.298] CloseHandle (hObject=0xbc) returned 1 [0147.301] CloseHandle (hObject=0xbc) returned 1 [0147.303] CloseHandle (hObject=0xbc) returned 1 [0147.309] CloseHandle (hObject=0xbc) returned 1 [0147.323] CloseHandle (hObject=0xbc) returned 1 [0147.325] CloseHandle (hObject=0xbc) returned 1 [0147.328] CloseHandle (hObject=0xbc) returned 1 [0147.334] CloseHandle (hObject=0xbc) returned 1 [0147.336] CloseHandle (hObject=0xbc) returned 1 [0147.339] CloseHandle (hObject=0xbc) returned 1 [0147.342] CloseHandle (hObject=0xbc) returned 1 [0147.344] CloseHandle (hObject=0xbc) returned 1 [0147.347] CloseHandle (hObject=0xbc) returned 1 [0147.351] CloseHandle (hObject=0xbc) returned 1 [0147.353] CloseHandle (hObject=0xbc) returned 1 [0147.355] CloseHandle (hObject=0xbc) returned 1 [0147.359] CloseHandle (hObject=0xbc) returned 1 [0147.361] CloseHandle (hObject=0xbc) returned 1 [0147.364] CloseHandle (hObject=0xbc) returned 1 [0147.369] CloseHandle (hObject=0xbc) returned 1 [0147.372] CloseHandle (hObject=0xbc) returned 1 [0147.374] CloseHandle (hObject=0xbc) returned 1 [0147.378] CloseHandle (hObject=0xbc) returned 1 [0147.379] CloseHandle (hObject=0xbc) returned 1 [0147.382] CloseHandle (hObject=0xbc) returned 1 [0147.386] CloseHandle (hObject=0xbc) returned 1 [0147.388] CloseHandle (hObject=0xbc) returned 1 [0147.390] CloseHandle (hObject=0xbc) returned 1 [0147.393] CloseHandle (hObject=0xbc) returned 1 [0147.395] CloseHandle (hObject=0xbc) returned 1 [0147.397] CloseHandle (hObject=0xbc) returned 1 [0147.400] CloseHandle (hObject=0xbc) returned 1 [0147.402] CloseHandle (hObject=0xbc) returned 1 [0147.404] CloseHandle (hObject=0xbc) returned 1 [0147.410] CloseHandle (hObject=0xbc) returned 1 [0147.412] CloseHandle (hObject=0xbc) returned 1 [0147.415] CloseHandle (hObject=0xbc) returned 1 [0147.419] CloseHandle (hObject=0xbc) returned 1 [0147.421] CloseHandle (hObject=0xbc) returned 1 [0147.425] CloseHandle (hObject=0xbc) returned 1 [0147.429] CloseHandle (hObject=0xbc) returned 1 [0147.431] CloseHandle (hObject=0xbc) returned 1 [0147.437] CloseHandle (hObject=0xbc) returned 1 [0147.441] CloseHandle (hObject=0xbc) returned 1 [0147.442] CloseHandle (hObject=0xbc) returned 1 [0147.445] CloseHandle (hObject=0xbc) returned 1 [0147.458] CloseHandle (hObject=0xbc) returned 1 [0147.460] CloseHandle (hObject=0xbc) returned 1 [0147.464] CloseHandle (hObject=0xbc) returned 1 [0147.467] CloseHandle (hObject=0xbc) returned 1 [0147.469] CloseHandle (hObject=0xbc) returned 1 [0147.472] CloseHandle (hObject=0xbc) returned 1 [0147.475] CloseHandle (hObject=0xbc) returned 1 [0147.477] CloseHandle (hObject=0xbc) returned 1 [0147.481] CloseHandle (hObject=0xbc) returned 1 [0147.484] CloseHandle (hObject=0xbc) returned 1 [0147.486] CloseHandle (hObject=0xbc) returned 1 [0147.488] CloseHandle (hObject=0xbc) returned 1 [0147.491] CloseHandle (hObject=0xbc) returned 1 [0147.493] CloseHandle (hObject=0xbc) returned 1 [0147.496] CloseHandle (hObject=0xbc) returned 1 [0147.499] CloseHandle (hObject=0xbc) returned 1 [0147.500] CloseHandle (hObject=0xbc) returned 1 [0147.510] CloseHandle (hObject=0xbc) returned 1 [0147.513] CloseHandle (hObject=0xbc) returned 1 [0147.515] CloseHandle (hObject=0xbc) returned 1 [0147.518] CloseHandle (hObject=0xbc) returned 1 [0147.521] CloseHandle (hObject=0xbc) returned 1 [0147.524] CloseHandle (hObject=0xbc) returned 1 [0147.526] CloseHandle (hObject=0xbc) returned 1 [0147.530] CloseHandle (hObject=0xbc) returned 1 [0147.531] CloseHandle (hObject=0xbc) returned 1 [0147.535] CloseHandle (hObject=0xbc) returned 1 [0147.552] CloseHandle (hObject=0xbc) returned 1 [0147.553] CloseHandle (hObject=0xbc) returned 1 [0147.557] CloseHandle (hObject=0xbc) returned 1 [0147.560] CloseHandle (hObject=0xbc) returned 1 [0147.562] CloseHandle (hObject=0xbc) returned 1 [0147.564] CloseHandle (hObject=0xbc) returned 1 [0147.575] CloseHandle (hObject=0xbc) returned 1 [0147.576] CloseHandle (hObject=0xbc) returned 1 [0147.578] CloseHandle (hObject=0xbc) returned 1 [0147.582] CloseHandle (hObject=0xbc) returned 1 [0147.590] CloseHandle (hObject=0xbc) returned 1 [0147.592] CloseHandle (hObject=0xbc) returned 1 [0147.601] CloseHandle (hObject=0xbc) returned 1 [0147.603] CloseHandle (hObject=0xbc) returned 1 [0147.607] CloseHandle (hObject=0xbc) returned 1 [0147.611] CloseHandle (hObject=0xbc) returned 1 [0147.613] CloseHandle (hObject=0xbc) returned 1 [0147.616] CloseHandle (hObject=0xbc) returned 1 [0147.620] CloseHandle (hObject=0xbc) returned 1 [0147.622] CloseHandle (hObject=0xbc) returned 1 [0147.624] CloseHandle (hObject=0xbc) returned 1 [0147.630] CloseHandle (hObject=0xbc) returned 1 [0147.632] CloseHandle (hObject=0xbc) returned 1 [0147.635] CloseHandle (hObject=0xbc) returned 1 [0147.639] CloseHandle (hObject=0xbc) returned 1 [0147.642] CloseHandle (hObject=0xbc) returned 1 [0147.644] CloseHandle (hObject=0xbc) returned 1 [0147.675] CloseHandle (hObject=0xbc) returned 1 [0147.677] CloseHandle (hObject=0xbc) returned 1 [0147.681] CloseHandle (hObject=0xbc) returned 1 [0147.684] CloseHandle (hObject=0xbc) returned 1 [0147.687] CloseHandle (hObject=0xbc) returned 1 [0147.689] CloseHandle (hObject=0xbc) returned 1 [0147.702] CloseHandle (hObject=0xbc) returned 1 [0147.704] CloseHandle (hObject=0xbc) returned 1 [0147.707] CloseHandle (hObject=0xbc) returned 1 [0147.720] CloseHandle (hObject=0xbc) returned 1 [0147.724] CloseHandle (hObject=0xbc) returned 1 [0147.726] CloseHandle (hObject=0xbc) returned 1 [0147.744] CloseHandle (hObject=0xbc) returned 1 [0147.747] CloseHandle (hObject=0xbc) returned 1 [0147.750] CloseHandle (hObject=0xb8) returned 1 [0147.754] CloseHandle (hObject=0xb8) returned 1 [0147.756] CloseHandle (hObject=0xb8) returned 1 [0147.761] CloseHandle (hObject=0xb0) returned 1 [0147.776] CloseHandle (hObject=0xb0) returned 1 [0147.778] CloseHandle (hObject=0xb0) returned 1 [0147.784] CloseHandle (hObject=0xb4) returned 1 [0147.787] CloseHandle (hObject=0xb4) returned 1 [0147.788] CloseHandle (hObject=0xb4) returned 1 [0147.814] CloseHandle (hObject=0xb8) returned 1 [0147.815] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.cryptoid"), dwFlags=0x2) returned 1 [0147.834] CloseHandle (hObject=0xb8) returned 1 [0147.836] CloseHandle (hObject=0xb8) returned 1 [0147.840] CloseHandle (hObject=0xb8) returned 1 [0147.843] CloseHandle (hObject=0xbc) returned 1 [0147.856] CloseHandle (hObject=0xbc) returned 1 [0147.858] CloseHandle (hObject=0xbc) returned 1 [0147.860] CloseHandle (hObject=0xbc) returned 1 [0147.863] CloseHandle (hObject=0xbc) returned 1 [0147.865] CloseHandle (hObject=0xbc) returned 1 [0147.868] CloseHandle (hObject=0xbc) returned 1 [0147.890] CloseHandle (hObject=0xbc) returned 1 [0147.892] CloseHandle (hObject=0xbc) returned 1 [0147.894] CloseHandle (hObject=0xbc) returned 1 [0147.897] CloseHandle (hObject=0xbc) returned 1 [0147.899] CloseHandle (hObject=0xbc) returned 1 [0147.901] CloseHandle (hObject=0xbc) returned 1 [0147.921] CloseHandle (hObject=0xbc) returned 1 [0147.923] CloseHandle (hObject=0xbc) returned 1 [0147.925] CloseHandle (hObject=0xbc) returned 1 [0147.928] CloseHandle (hObject=0xbc) returned 1 [0147.929] CloseHandle (hObject=0xbc) returned 1 [0147.931] CloseHandle (hObject=0xbc) returned 1 [0147.934] CloseHandle (hObject=0xbc) returned 1 [0147.935] CloseHandle (hObject=0xbc) returned 1 [0147.936] CloseHandle (hObject=0xbc) returned 1 [0147.949] CloseHandle (hObject=0xbc) returned 1 [0147.951] CloseHandle (hObject=0xbc) returned 1 [0147.952] CloseHandle (hObject=0xbc) returned 1 [0147.954] CloseHandle (hObject=0xbc) returned 1 [0147.956] CloseHandle (hObject=0xbc) returned 1 [0147.958] CloseHandle (hObject=0xbc) returned 1 [0147.968] CloseHandle (hObject=0xbc) returned 1 [0147.969] CloseHandle (hObject=0xbc) returned 1 [0147.972] CloseHandle (hObject=0xbc) returned 1 [0147.974] CloseHandle (hObject=0xbc) returned 1 [0147.976] CloseHandle (hObject=0xbc) returned 1 [0147.977] CloseHandle (hObject=0xbc) returned 1 [0147.993] CloseHandle (hObject=0xbc) returned 1 [0147.995] CloseHandle (hObject=0xbc) returned 1 [0147.997] CloseHandle (hObject=0xbc) returned 1 [0148.000] CloseHandle (hObject=0xbc) returned 1 [0148.002] CloseHandle (hObject=0xbc) returned 1 [0148.004] CloseHandle (hObject=0xbc) returned 1 [0148.018] CloseHandle (hObject=0xbc) returned 1 [0148.020] CloseHandle (hObject=0xbc) returned 1 [0148.022] CloseHandle (hObject=0xbc) returned 1 [0148.025] CloseHandle (hObject=0xbc) returned 1 [0148.026] CloseHandle (hObject=0xbc) returned 1 [0148.029] CloseHandle (hObject=0xbc) returned 1 [0148.032] CloseHandle (hObject=0xbc) returned 1 [0148.035] CloseHandle (hObject=0xbc) returned 1 [0148.038] CloseHandle (hObject=0xbc) returned 1 [0148.047] CloseHandle (hObject=0xbc) returned 1 [0148.048] CloseHandle (hObject=0xbc) returned 1 [0148.050] CloseHandle (hObject=0xbc) returned 1 [0148.053] CloseHandle (hObject=0xbc) returned 1 [0148.055] CloseHandle (hObject=0xbc) returned 1 [0148.057] CloseHandle (hObject=0xbc) returned 1 [0148.067] CloseHandle (hObject=0xbc) returned 1 [0148.069] CloseHandle (hObject=0xbc) returned 1 [0148.073] CloseHandle (hObject=0xbc) returned 1 [0148.076] CloseHandle (hObject=0xbc) returned 1 [0148.078] CloseHandle (hObject=0xbc) returned 1 [0148.080] CloseHandle (hObject=0xbc) returned 1 [0148.087] CloseHandle (hObject=0xbc) returned 1 [0148.089] CloseHandle (hObject=0xbc) returned 1 [0148.091] CloseHandle (hObject=0xbc) returned 1 [0148.094] CloseHandle (hObject=0xbc) returned 1 [0148.096] CloseHandle (hObject=0xbc) returned 1 [0148.108] CloseHandle (hObject=0xbc) returned 1 [0148.116] CloseHandle (hObject=0xbc) returned 1 [0148.119] CloseHandle (hObject=0xbc) returned 1 [0148.121] CloseHandle (hObject=0xbc) returned 1 [0148.124] CloseHandle (hObject=0xbc) returned 1 [0148.125] CloseHandle (hObject=0xbc) returned 1 [0148.128] CloseHandle (hObject=0xbc) returned 1 [0148.131] CloseHandle (hObject=0xbc) returned 1 [0148.132] CloseHandle (hObject=0xbc) returned 1 [0148.134] CloseHandle (hObject=0xbc) returned 1 [0148.138] CloseHandle (hObject=0xbc) returned 1 [0148.139] CloseHandle (hObject=0xbc) returned 1 [0148.141] CloseHandle (hObject=0xbc) returned 1 [0148.145] CloseHandle (hObject=0xbc) returned 1 [0148.147] CloseHandle (hObject=0xbc) returned 1 [0148.149] CloseHandle (hObject=0xbc) returned 1 [0148.160] CloseHandle (hObject=0xbc) returned 1 [0148.163] CloseHandle (hObject=0xbc) returned 1 [0148.164] CloseHandle (hObject=0xbc) returned 1 [0148.167] CloseHandle (hObject=0xbc) returned 1 [0148.169] CloseHandle (hObject=0xbc) returned 1 [0148.172] CloseHandle (hObject=0xbc) returned 1 [0148.190] CloseHandle (hObject=0xbc) returned 1 [0148.192] CloseHandle (hObject=0xbc) returned 1 [0148.193] CloseHandle (hObject=0xbc) returned 1 [0148.197] CloseHandle (hObject=0xbc) returned 1 [0148.198] CloseHandle (hObject=0xbc) returned 1 [0148.200] CloseHandle (hObject=0xbc) returned 1 [0148.213] CloseHandle (hObject=0xbc) returned 1 [0148.215] CloseHandle (hObject=0xbc) returned 1 [0148.216] CloseHandle (hObject=0xbc) returned 1 [0148.218] CloseHandle (hObject=0xbc) returned 1 [0148.220] CloseHandle (hObject=0xbc) returned 1 [0148.221] CloseHandle (hObject=0xbc) returned 1 [0148.224] CloseHandle (hObject=0xbc) returned 1 [0148.225] CloseHandle (hObject=0xbc) returned 1 [0148.228] CloseHandle (hObject=0xbc) returned 1 [0148.238] CloseHandle (hObject=0xbc) returned 1 [0148.239] CloseHandle (hObject=0xbc) returned 1 [0148.241] CloseHandle (hObject=0xbc) returned 1 [0148.244] CloseHandle (hObject=0xbc) returned 1 [0148.245] CloseHandle (hObject=0xbc) returned 1 [0148.246] CloseHandle (hObject=0xbc) returned 1 [0148.252] CloseHandle (hObject=0xbc) returned 1 [0148.254] CloseHandle (hObject=0xbc) returned 1 [0148.255] CloseHandle (hObject=0xbc) returned 1 [0148.257] CloseHandle (hObject=0xbc) returned 1 [0148.258] CloseHandle (hObject=0xbc) returned 1 [0148.261] CloseHandle (hObject=0xb8) returned 1 [0148.267] CloseHandle (hObject=0xb8) returned 1 [0148.271] CloseHandle (hObject=0xb8) returned 1 [0148.274] CloseHandle (hObject=0xb0) returned 1 [0148.277] CloseHandle (hObject=0xb0) returned 1 [0148.279] CloseHandle (hObject=0xb0) returned 1 [0148.290] CloseHandle (hObject=0xb4) returned 1 [0148.292] CloseHandle (hObject=0xb4) returned 1 [0148.294] CloseHandle (hObject=0xb4) returned 1 [0148.827] CloseHandle (hObject=0xb8) returned 1 [0148.828] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.cryptoid"), dwFlags=0x2) returned 1 [0148.891] CloseHandle (hObject=0xb8) returned 1 [0148.891] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.cryptoid"), dwFlags=0x2) returned 1 [0149.006] CloseHandle (hObject=0xb8) returned 1 [0149.006] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.cryptoid"), dwFlags=0x2) returned 1 [0149.266] CloseHandle (hObject=0xb8) returned 1 [0149.266] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.cryptoid"), dwFlags=0x2) returned 1 [0149.340] CloseHandle (hObject=0xb8) returned 1 [0149.340] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.cryptoid"), dwFlags=0x2) returned 1 [0149.358] CloseHandle (hObject=0xb8) returned 1 [0149.359] CloseHandle (hObject=0xb8) returned 1 [0149.361] CloseHandle (hObject=0xb8) returned 1 [0149.528] CloseHandle (hObject=0xbc) returned 1 [0149.529] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.cryptoid"), dwFlags=0x2) returned 1 [0149.531] CloseHandle (hObject=0xbc) returned 1 [0149.531] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.cryptoid"), dwFlags=0x2) returned 1 [0149.554] CloseHandle (hObject=0xbc) returned 1 [0149.554] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.cryptoid"), dwFlags=0x2) returned 1 [0149.570] CloseHandle (hObject=0xb8) returned 1 [0149.593] CloseHandle (hObject=0xb8) returned 1 [0149.594] CloseHandle (hObject=0xb8) returned 1 [0149.608] CloseHandle (hObject=0xbc) returned 1 [0149.608] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.cryptoid"), dwFlags=0x2) returned 1 [0149.698] CloseHandle (hObject=0xb8) returned 1 [0149.698] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.cryptoid"), dwFlags=0x2) returned 1 [0149.744] CloseHandle (hObject=0xb8) returned 1 [0149.744] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.cryptoid"), dwFlags=0x2) returned 1 [0149.784] CloseHandle (hObject=0xb8) returned 1 [0149.785] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.cryptoid"), dwFlags=0x2) returned 1 [0149.988] CloseHandle (hObject=0xb8) returned 1 [0149.988] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.cryptoid"), dwFlags=0x2) returned 1 [0150.708] CloseHandle (hObject=0xb8) returned 1 [0150.708] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.cryptoid"), dwFlags=0x2) returned 1 [0150.714] CloseHandle (hObject=0xb8) returned 1 [0150.714] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.cryptoid"), dwFlags=0x2) returned 1 [0150.733] CloseHandle (hObject=0xb8) returned 1 [0150.737] CloseHandle (hObject=0xb8) returned 1 [0150.739] CloseHandle (hObject=0xb8) returned 1 [0150.740] CloseHandle (hObject=0xbc) returned 1 [0150.752] CloseHandle (hObject=0xbc) returned 1 [0150.754] CloseHandle (hObject=0xbc) returned 1 [0150.755] CloseHandle (hObject=0xbc) returned 1 [0150.758] CloseHandle (hObject=0xbc) returned 1 [0150.760] CloseHandle (hObject=0xbc) returned 1 [0150.762] CloseHandle (hObject=0xbc) returned 1 [0150.767] CloseHandle (hObject=0xbc) returned 1 [0150.769] CloseHandle (hObject=0xbc) returned 1 [0150.770] CloseHandle (hObject=0xbc) returned 1 [0150.773] CloseHandle (hObject=0xbc) returned 1 [0150.774] CloseHandle (hObject=0xbc) returned 1 [0150.777] CloseHandle (hObject=0xbc) returned 1 [0150.786] CloseHandle (hObject=0xbc) returned 1 [0150.788] CloseHandle (hObject=0xbc) returned 1 [0150.789] CloseHandle (hObject=0xbc) returned 1 [0150.792] CloseHandle (hObject=0xbc) returned 1 [0150.793] CloseHandle (hObject=0xbc) returned 1 [0150.795] CloseHandle (hObject=0xbc) returned 1 [0150.800] CloseHandle (hObject=0xbc) returned 1 [0150.802] CloseHandle (hObject=0xbc) returned 1 [0150.803] CloseHandle (hObject=0xbc) returned 1 [0150.806] CloseHandle (hObject=0xbc) returned 1 [0150.807] CloseHandle (hObject=0xbc) returned 1 [0150.810] CloseHandle (hObject=0xbc) returned 1 [0150.816] CloseHandle (hObject=0xbc) returned 1 [0150.817] CloseHandle (hObject=0xbc) returned 1 [0150.819] CloseHandle (hObject=0xbc) returned 1 [0150.822] CloseHandle (hObject=0xbc) returned 1 [0150.823] CloseHandle (hObject=0xbc) returned 1 [0150.825] CloseHandle (hObject=0xbc) returned 1 [0150.828] CloseHandle (hObject=0xbc) returned 1 [0150.829] CloseHandle (hObject=0xbc) returned 1 [0150.831] CloseHandle (hObject=0xbc) returned 1 [0150.839] CloseHandle (hObject=0xbc) returned 1 [0150.841] CloseHandle (hObject=0xbc) returned 1 [0150.844] CloseHandle (hObject=0xbc) returned 1 [0150.847] CloseHandle (hObject=0xbc) returned 1 [0150.849] CloseHandle (hObject=0xbc) returned 1 [0150.852] CloseHandle (hObject=0xbc) returned 1 [0150.858] CloseHandle (hObject=0xbc) returned 1 [0150.860] CloseHandle (hObject=0xbc) returned 1 [0150.863] CloseHandle (hObject=0xbc) returned 1 [0150.866] CloseHandle (hObject=0xbc) returned 1 [0150.882] CloseHandle (hObject=0xbc) returned 1 [0150.884] CloseHandle (hObject=0xbc) returned 1 [0150.898] CloseHandle (hObject=0xbc) returned 1 [0150.900] CloseHandle (hObject=0xbc) returned 1 [0150.902] CloseHandle (hObject=0xbc) returned 1 [0150.906] CloseHandle (hObject=0xbc) returned 1 [0150.908] CloseHandle (hObject=0xbc) returned 1 [0150.910] CloseHandle (hObject=0xbc) returned 1 [0150.921] CloseHandle (hObject=0xbc) returned 1 [0150.923] CloseHandle (hObject=0xbc) returned 1 [0150.935] CloseHandle (hObject=0xbc) returned 1 [0150.938] CloseHandle (hObject=0xbc) returned 1 [0150.941] CloseHandle (hObject=0xbc) returned 1 [0150.943] CloseHandle (hObject=0xbc) returned 1 [0150.948] CloseHandle (hObject=0xbc) returned 1 [0150.950] CloseHandle (hObject=0xbc) returned 1 [0150.953] CloseHandle (hObject=0xbc) returned 1 [0151.000] CloseHandle (hObject=0xbc) returned 1 [0151.003] CloseHandle (hObject=0xbc) returned 1 [0151.004] CloseHandle (hObject=0xbc) returned 1 [0151.010] CloseHandle (hObject=0xbc) returned 1 [0151.012] CloseHandle (hObject=0xbc) returned 1 [0151.015] CloseHandle (hObject=0xbc) returned 1 [0151.031] CloseHandle (hObject=0xbc) returned 1 [0151.032] CloseHandle (hObject=0xbc) returned 1 [0151.034] CloseHandle (hObject=0xbc) returned 1 [0151.037] CloseHandle (hObject=0xbc) returned 1 [0151.039] CloseHandle (hObject=0xbc) returned 1 [0151.041] CloseHandle (hObject=0xbc) returned 1 [0151.048] CloseHandle (hObject=0xbc) returned 1 [0151.050] CloseHandle (hObject=0xbc) returned 1 [0151.052] CloseHandle (hObject=0xbc) returned 1 [0151.055] CloseHandle (hObject=0xbc) returned 1 [0151.058] CloseHandle (hObject=0xbc) returned 1 [0151.060] CloseHandle (hObject=0xbc) returned 1 [0151.066] CloseHandle (hObject=0xbc) returned 1 [0151.068] CloseHandle (hObject=0xbc) returned 1 [0151.071] CloseHandle (hObject=0xbc) returned 1 [0151.076] CloseHandle (hObject=0xbc) returned 1 [0151.078] CloseHandle (hObject=0xbc) returned 1 [0151.080] CloseHandle (hObject=0xbc) returned 1 [0151.083] CloseHandle (hObject=0xbc) returned 1 [0151.084] CloseHandle (hObject=0xbc) returned 1 [0151.086] CloseHandle (hObject=0xbc) returned 1 [0151.105] CloseHandle (hObject=0xbc) returned 1 [0151.109] CloseHandle (hObject=0xbc) returned 1 [0151.111] CloseHandle (hObject=0xbc) returned 1 [0151.115] CloseHandle (hObject=0xbc) returned 1 [0151.116] CloseHandle (hObject=0xbc) returned 1 [0151.118] CloseHandle (hObject=0xbc) returned 1 [0151.136] CloseHandle (hObject=0xbc) returned 1 [0151.138] CloseHandle (hObject=0xbc) returned 1 [0151.140] CloseHandle (hObject=0xbc) returned 1 [0151.144] CloseHandle (hObject=0xbc) returned 1 [0151.145] CloseHandle (hObject=0xbc) returned 1 [0151.147] CloseHandle (hObject=0xbc) returned 1 [0151.159] CloseHandle (hObject=0xbc) returned 1 [0151.160] CloseHandle (hObject=0xbc) returned 1 [0151.162] CloseHandle (hObject=0xbc) returned 1 [0151.165] CloseHandle (hObject=0xbc) returned 1 [0151.167] CloseHandle (hObject=0xbc) returned 1 [0151.168] CloseHandle (hObject=0xbc) returned 1 [0151.178] CloseHandle (hObject=0xbc) returned 1 [0151.180] CloseHandle (hObject=0xbc) returned 1 [0151.183] CloseHandle (hObject=0xbc) returned 1 [0151.186] CloseHandle (hObject=0xbc) returned 1 [0151.188] CloseHandle (hObject=0xbc) returned 1 [0151.192] CloseHandle (hObject=0xbc) returned 1 [0151.195] CloseHandle (hObject=0xbc) returned 1 [0151.196] CloseHandle (hObject=0xbc) returned 1 [0151.199] CloseHandle (hObject=0xbc) returned 1 [0151.203] CloseHandle (hObject=0xbc) returned 1 [0151.205] CloseHandle (hObject=0xbc) returned 1 [0151.207] CloseHandle (hObject=0xbc) returned 1 [0151.210] CloseHandle (hObject=0xbc) returned 1 [0151.213] CloseHandle (hObject=0xbc) returned 1 [0151.216] CloseHandle (hObject=0xbc) returned 1 [0151.225] CloseHandle (hObject=0xbc) returned 1 [0151.227] CloseHandle (hObject=0xbc) returned 1 [0151.229] CloseHandle (hObject=0xbc) returned 1 [0151.233] CloseHandle (hObject=0xbc) returned 1 [0151.235] CloseHandle (hObject=0xbc) returned 1 [0151.237] CloseHandle (hObject=0xbc) returned 1 [0151.247] CloseHandle (hObject=0xbc) returned 1 [0151.249] CloseHandle (hObject=0xbc) returned 1 [0151.251] CloseHandle (hObject=0xbc) returned 1 [0151.255] CloseHandle (hObject=0xbc) returned 1 [0151.257] CloseHandle (hObject=0xbc) returned 1 [0151.261] CloseHandle (hObject=0xbc) returned 1 [0151.271] CloseHandle (hObject=0xbc) returned 1 [0151.277] CloseHandle (hObject=0xbc) returned 1 [0151.279] CloseHandle (hObject=0xbc) returned 1 [0151.282] CloseHandle (hObject=0xbc) returned 1 [0151.284] CloseHandle (hObject=0xbc) returned 1 [0151.286] CloseHandle (hObject=0xbc) returned 1 [0151.289] CloseHandle (hObject=0xbc) returned 1 [0151.290] CloseHandle (hObject=0xbc) returned 1 [0151.292] CloseHandle (hObject=0xbc) returned 1 [0151.299] CloseHandle (hObject=0xbc) returned 1 [0151.301] CloseHandle (hObject=0xbc) returned 1 [0151.305] CloseHandle (hObject=0xbc) returned 1 [0151.308] CloseHandle (hObject=0xbc) returned 1 [0151.311] CloseHandle (hObject=0xbc) returned 1 [0151.314] CloseHandle (hObject=0xbc) returned 1 [0151.333] CloseHandle (hObject=0xbc) returned 1 [0151.334] CloseHandle (hObject=0xbc) returned 1 [0151.338] CloseHandle (hObject=0xbc) returned 1 [0151.341] CloseHandle (hObject=0xbc) returned 1 [0151.365] CloseHandle (hObject=0xbc) returned 1 [0151.397] CloseHandle (hObject=0xbc) returned 1 [0151.407] CloseHandle (hObject=0xbc) returned 1 [0151.409] CloseHandle (hObject=0xbc) returned 1 [0151.414] CloseHandle (hObject=0xb8) returned 1 [0151.416] CloseHandle (hObject=0xb8) returned 1 [0151.419] CloseHandle (hObject=0xb8) returned 1 [0151.422] CloseHandle (hObject=0xb0) returned 1 [0151.424] CloseHandle (hObject=0xb0) returned 1 [0151.437] CloseHandle (hObject=0xb0) returned 1 [0151.441] CloseHandle (hObject=0xac) returned 1 [0151.444] CloseHandle (hObject=0xac) returned 1 [0151.446] CloseHandle (hObject=0xac) returned 1 [0151.452] CloseHandle (hObject=0xb0) returned 1 [0151.455] CloseHandle (hObject=0xb0) returned 1 [0151.457] CloseHandle (hObject=0xb0) returned 1 [0151.480] CloseHandle (hObject=0xb0) returned 1 [0151.484] CloseHandle (hObject=0xb0) returned 1 [0151.487] CloseHandle (hObject=0xb0) returned 1 [0151.489] CloseHandle (hObject=0xac) returned 1 [0151.496] CloseHandle (hObject=0xac) returned 1 [0151.499] CloseHandle (hObject=0xac) returned 1 [0151.503] CloseHandle (hObject=0xac) returned 1 [0151.506] CloseHandle (hObject=0xac) returned 1 [0151.510] CloseHandle (hObject=0xac) returned 1 [0151.512] CloseHandle (hObject=0xac) returned 1 [0151.542] CloseHandle (hObject=0xac) returned 1 [0151.546] CloseHandle (hObject=0xac) returned 1 [0151.581] CloseHandle (hObject=0xb0) returned 1 [0151.583] CloseHandle (hObject=0xb0) returned 1 [0151.584] CloseHandle (hObject=0xb0) returned 1 [0151.599] CloseHandle (hObject=0xac) returned 1 [0151.601] CloseHandle (hObject=0xac) returned 1 [0151.603] CloseHandle (hObject=0xac) returned 1 [0151.650] CloseHandle (hObject=0xac) returned 1 [0151.650] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db.cryptoid"), dwFlags=0x2) returned 1 [0151.670] CloseHandle (hObject=0xac) returned 1 [0151.672] CloseHandle (hObject=0xac) returned 1 [0151.676] CloseHandle (hObject=0xac) returned 1 [0151.688] CloseHandle (hObject=0xb0) returned 1 [0151.689] CloseHandle (hObject=0xb0) returned 1 [0151.692] CloseHandle (hObject=0xb0) returned 1 [0151.707] CloseHandle (hObject=0xb4) returned 1 [0151.709] CloseHandle (hObject=0xb4) returned 1 [0151.711] CloseHandle (hObject=0xb4) returned 1 [0151.736] CloseHandle (hObject=0xb8) returned 1 [0151.738] CloseHandle (hObject=0xb8) returned 1 [0151.740] CloseHandle (hObject=0xb8) returned 1 [0151.774] CloseHandle (hObject=0xbc) returned 1 [0151.780] CloseHandle (hObject=0xbc) returned 1 [0151.782] CloseHandle (hObject=0xbc) returned 1 [0151.791] CloseHandle (hObject=0xb8) returned 1 [0151.791] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt.cryptoid"), dwFlags=0x2) returned 1 [0151.810] CloseHandle (hObject=0xb4) returned 1 [0151.812] CloseHandle (hObject=0xb4) returned 1 [0151.816] CloseHandle (hObject=0xb4) returned 1 [0151.826] CloseHandle (hObject=0xb8) returned 1 [0151.828] CloseHandle (hObject=0xb8) returned 1 [0151.830] CloseHandle (hObject=0xb8) returned 1 [0151.861] CloseHandle (hObject=0xbc) returned 1 [0151.863] CloseHandle (hObject=0xbc) returned 1 [0151.864] CloseHandle (hObject=0xbc) returned 1 [0151.886] CloseHandle (hObject=0xb8) returned 1 [0151.889] CloseHandle (hObject=0xb8) returned 1 [0151.891] CloseHandle (hObject=0xb8) returned 1 [0151.898] CloseHandle (hObject=0xbc) returned 1 [0151.899] CloseHandle (hObject=0xbc) returned 1 [0151.901] CloseHandle (hObject=0xbc) returned 1 [0151.903] CloseHandle (hObject=0xb8) returned 1 [0151.904] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt.cryptoid"), dwFlags=0x2) returned 1 [0151.921] CloseHandle (hObject=0xb0) returned 1 [0151.922] CloseHandle (hObject=0xb0) returned 1 [0151.935] CloseHandle (hObject=0xb0) returned 1 [0151.945] CloseHandle (hObject=0xb0) returned 1 [0151.947] CloseHandle (hObject=0xb0) returned 1 [0151.949] CloseHandle (hObject=0xb0) returned 1 [0151.964] CloseHandle (hObject=0xb4) returned 1 [0151.965] CloseHandle (hObject=0xb4) returned 1 [0151.969] CloseHandle (hObject=0xb4) returned 1 [0151.985] CloseHandle (hObject=0xac) returned 1 [0151.988] CloseHandle (hObject=0xac) returned 1 [0151.990] CloseHandle (hObject=0xac) returned 1 [0151.992] CloseHandle (hObject=0xac) returned 1 [0152.001] CloseHandle (hObject=0xac) returned 1 [0152.003] CloseHandle (hObject=0xac) returned 1 [0152.013] CloseHandle (hObject=0xb0) returned 1 [0152.015] CloseHandle (hObject=0xb0) returned 1 [0152.017] CloseHandle (hObject=0xb0) returned 1 [0152.020] CloseHandle (hObject=0xac) returned 1 [0152.034] CloseHandle (hObject=0xac) returned 1 [0152.036] CloseHandle (hObject=0xac) returned 1 [0152.052] CloseHandle (hObject=0xb0) returned 1 [0152.053] CloseHandle (hObject=0xb0) returned 1 [0152.055] CloseHandle (hObject=0xb0) returned 1 [0152.058] CloseHandle (hObject=0xa8) returned 1 [0152.061] CloseHandle (hObject=0xa8) returned 1 [0152.065] CloseHandle (hObject=0xa8) returned 1 [0152.067] CloseHandle (hObject=0xa8) returned 1 [0152.069] CloseHandle (hObject=0xa8) returned 1 [0152.072] CloseHandle (hObject=0xa8) returned 1 [0152.074] CloseHandle (hObject=0xa8) returned 1 [0152.076] CloseHandle (hObject=0xa8) returned 1 [0152.084] CloseHandle (hObject=0xa8) returned 1 [0152.088] CloseHandle (hObject=0xa8) returned 1 [0152.089] CloseHandle (hObject=0xa8) returned 1 [0152.099] CloseHandle (hObject=0xa8) returned 1 [0152.134] CloseHandle (hObject=0xa8) returned 1 [0152.136] CloseHandle (hObject=0xa8) returned 1 [0152.139] CloseHandle (hObject=0xa8) returned 1 [0152.141] CloseHandle (hObject=0xa8) returned 1 [0152.148] CloseHandle (hObject=0xa8) returned 1 [0152.161] CloseHandle (hObject=0xa8) returned 1 [0152.163] CloseHandle (hObject=0xa8) returned 1 [0152.170] CloseHandle (hObject=0xa8) returned 1 [0152.174] CloseHandle (hObject=0xa8) returned 1 [0152.176] CloseHandle (hObject=0xac) returned 1 [0152.178] CloseHandle (hObject=0xac) returned 1 [0152.190] CloseHandle (hObject=0xac) returned 1 [0152.202] CloseHandle (hObject=0xa8) returned 1 [0152.204] CloseHandle (hObject=0xa8) returned 1 [0152.214] CloseHandle (hObject=0xa8) returned 1 [0152.216] CloseHandle (hObject=0xa8) returned 1 [0152.221] CloseHandle (hObject=0xa8) returned 1 [0152.226] CloseHandle (hObject=0xa8) returned 1 [0152.228] CloseHandle (hObject=0xa0) returned 1 [0152.230] CloseHandle (hObject=0xa0) returned 1 [0152.256] CloseHandle (hObject=0xa0) returned 1 [0152.259] CloseHandle (hObject=0x9c) returned 1 [0152.262] CloseHandle (hObject=0x9c) returned 1 [0152.265] CloseHandle (hObject=0x9c) returned 1 [0152.288] CloseHandle (hObject=0x9c) returned 1 [0152.289] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\iconcache.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\iconcache.db.cryptoid"), dwFlags=0x2) returned 1 [0152.292] CloseHandle (hObject=0x9c) returned 1 [0152.294] CloseHandle (hObject=0x9c) returned 1 [0152.295] CloseHandle (hObject=0x9c) returned 1 [0152.302] CloseHandle (hObject=0xa0) returned 1 [0152.326] CloseHandle (hObject=0xa0) returned 1 [0152.328] CloseHandle (hObject=0xa0) returned 1 [0152.331] CloseHandle (hObject=0xa4) returned 1 [0152.334] CloseHandle (hObject=0xa4) returned 1 [0152.336] CloseHandle (hObject=0xa4) returned 1 [0152.339] CloseHandle (hObject=0xa0) returned 1 [0152.349] CloseHandle (hObject=0xa0) returned 1 [0152.354] CloseHandle (hObject=0xa0) returned 1 [0152.367] CloseHandle (hObject=0xa4) returned 1 [0152.368] CloseHandle (hObject=0xa4) returned 1 [0152.369] CloseHandle (hObject=0xa4) returned 1 [0152.371] CloseHandle (hObject=0xa0) returned 1 [0152.375] CloseHandle (hObject=0xa0) returned 1 [0152.377] CloseHandle (hObject=0xa0) returned 1 [0152.397] CloseHandle (hObject=0xa4) returned 1 [0152.398] CloseHandle (hObject=0xa4) returned 1 [0152.401] CloseHandle (hObject=0xa4) returned 1 [0152.406] CloseHandle (hObject=0xa0) returned 1 [0152.412] CloseHandle (hObject=0xa0) returned 1 [0152.414] CloseHandle (hObject=0xa0) returned 1 [0152.416] CloseHandle (hObject=0xa0) returned 1 [0152.417] CloseHandle (hObject=0xa0) returned 1 [0152.421] CloseHandle (hObject=0xa0) returned 1 [0152.425] CloseHandle (hObject=0xa0) returned 1 [0152.427] CloseHandle (hObject=0xa0) returned 1 [0152.428] CloseHandle (hObject=0xa0) returned 1 [0152.432] CloseHandle (hObject=0xa4) returned 1 [0152.434] CloseHandle (hObject=0xa4) returned 1 [0152.435] CloseHandle (hObject=0xa4) returned 1 [0152.452] CloseHandle (hObject=0xa0) returned 1 [0152.455] CloseHandle (hObject=0xa0) returned 1 [0152.457] CloseHandle (hObject=0xa0) returned 1 [0152.465] CloseHandle (hObject=0xa4) returned 1 [0152.467] CloseHandle (hObject=0xa4) returned 1 [0152.472] CloseHandle (hObject=0xa4) returned 1 [0152.474] CloseHandle (hObject=0xa4) returned 1 [0152.474] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0152.476] CloseHandle (hObject=0xa4) returned 1 [0152.478] CloseHandle (hObject=0xa4) returned 1 [0152.481] CloseHandle (hObject=0xa4) returned 1 [0152.484] CloseHandle (hObject=0xa4) returned 1 [0152.487] CloseHandle (hObject=0xa4) returned 1 [0152.489] CloseHandle (hObject=0xa4) returned 1 [0152.491] CloseHandle (hObject=0xa4) returned 1 [0152.493] CloseHandle (hObject=0xa4) returned 1 [0152.496] CloseHandle (hObject=0xa4) returned 1 [0152.498] CloseHandle (hObject=0xa0) returned 1 [0152.507] CloseHandle (hObject=0xa0) returned 1 [0152.508] CloseHandle (hObject=0xa0) returned 1 [0152.511] CloseHandle (hObject=0xa0) returned 1 [0152.516] CloseHandle (hObject=0xa0) returned 1 [0152.520] CloseHandle (hObject=0xa0) returned 1 [0152.522] CloseHandle (hObject=0xa0) returned 1 [0152.526] CloseHandle (hObject=0xa0) returned 1 [0152.528] CloseHandle (hObject=0xa0) returned 1 [0152.531] CloseHandle (hObject=0xa4) returned 1 [0152.533] CloseHandle (hObject=0xa4) returned 1 [0152.536] CloseHandle (hObject=0xa4) returned 1 [0152.540] CloseHandle (hObject=0xa0) returned 1 [0152.543] CloseHandle (hObject=0xa0) returned 1 [0152.544] CloseHandle (hObject=0xa0) returned 1 [0152.564] CloseHandle (hObject=0xa4) returned 1 [0152.564] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.cryptoid"), dwFlags=0x2) returned 1 [0152.577] CloseHandle (hObject=0xa4) returned 1 [0152.580] CloseHandle (hObject=0xa4) returned 1 [0152.581] CloseHandle (hObject=0xa4) returned 1 [0152.585] CloseHandle (hObject=0xa4) returned 1 [0152.587] CloseHandle (hObject=0xa4) returned 1 [0152.589] CloseHandle (hObject=0xa4) returned 1 [0152.591] CloseHandle (hObject=0xa8) returned 1 [0152.592] CloseHandle (hObject=0xa8) returned 1 [0152.605] CloseHandle (hObject=0xa8) returned 1 [0152.608] CloseHandle (hObject=0xa8) returned 1 [0152.611] CloseHandle (hObject=0xa8) returned 1 [0152.613] CloseHandle (hObject=0xa8) returned 1 [0152.614] CloseHandle (hObject=0xa8) returned 1 [0152.614] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0152.617] CloseHandle (hObject=0xa8) returned 1 [0152.620] CloseHandle (hObject=0xa8) returned 1 [0152.622] CloseHandle (hObject=0xa8) returned 1 [0152.625] CloseHandle (hObject=0xa8) returned 1 [0152.629] CloseHandle (hObject=0xa8) returned 1 [0152.641] CloseHandle (hObject=0xa8) returned 1 [0152.643] CloseHandle (hObject=0xa4) returned 1 [0152.646] CloseHandle (hObject=0xa4) returned 1 [0152.648] CloseHandle (hObject=0xa4) returned 1 [0152.649] CloseHandle (hObject=0xa8) returned 1 [0152.649] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0152.652] CloseHandle (hObject=0xa4) returned 1 [0152.670] CloseHandle (hObject=0xa4) returned 1 [0152.672] CloseHandle (hObject=0xa4) returned 1 [0152.673] CloseHandle (hObject=0xa8) returned 1 [0152.674] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0152.677] CloseHandle (hObject=0xa4) returned 1 [0152.680] CloseHandle (hObject=0xa4) returned 1 [0152.682] CloseHandle (hObject=0xa4) returned 1 [0152.683] CloseHandle (hObject=0xa8) returned 1 [0152.683] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0152.689] CloseHandle (hObject=0xa4) returned 1 [0152.693] CloseHandle (hObject=0xa4) returned 1 [0152.694] CloseHandle (hObject=0xa4) returned 1 [0152.696] CloseHandle (hObject=0xa4) returned 1 [0152.703] CloseHandle (hObject=0xa4) returned 1 [0152.706] CloseHandle (hObject=0xa4) returned 1 [0152.707] CloseHandle (hObject=0xa8) returned 1 [0152.707] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0152.709] CloseHandle (hObject=0xa4) returned 1 [0152.712] CloseHandle (hObject=0xa4) returned 1 [0152.714] CloseHandle (hObject=0xa4) returned 1 [0152.716] CloseHandle (hObject=0xa8) returned 1 [0152.718] CloseHandle (hObject=0xa8) returned 1 [0152.727] CloseHandle (hObject=0xa8) returned 1 [0152.731] CloseHandle (hObject=0xa8) returned 1 [0152.735] CloseHandle (hObject=0xa8) returned 1 [0152.736] CloseHandle (hObject=0xa8) returned 1 [0152.771] CloseHandle (hObject=0xac) returned 1 [0152.771] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\sl72e5n\\imagestore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\sl72e5n\\imagestore.dat.cryptoid"), dwFlags=0x2) returned 1 [0152.774] CloseHandle (hObject=0xa4) returned 1 [0152.778] CloseHandle (hObject=0xa4) returned 1 [0152.780] CloseHandle (hObject=0xa4) returned 1 [0152.782] CloseHandle (hObject=0xa8) returned 1 [0152.783] CloseHandle (hObject=0xa8) returned 1 [0152.787] CloseHandle (hObject=0xa8) returned 1 [0152.793] CloseHandle (hObject=0xa8) returned 1 [0152.794] CloseHandle (hObject=0xa8) returned 1 [0152.796] CloseHandle (hObject=0xa8) returned 1 [0152.808] CloseHandle (hObject=0xac) returned 1 [0152.808] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{63e26eb7-6816-11e7-9bd2-c40142ecde47}.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{63e26eb7-6816-11e7-9bd2-c40142ecde47}.dat.cryptoid"), dwFlags=0x2) returned 1 [0152.830] CloseHandle (hObject=0xac) returned 1 [0152.831] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{94c50253-c9ac-11e7-9bdd-c40142ecde47}.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{94c50253-c9ac-11e7-9bdd-c40142ecde47}.dat.cryptoid"), dwFlags=0x2) returned 1 [0152.835] CloseHandle (hObject=0xa4) returned 1 [0152.845] CloseHandle (hObject=0xa4) returned 1 [0152.863] CloseHandle (hObject=0xa4) returned 1 [0152.868] CloseHandle (hObject=0xa4) returned 1 [0152.884] CloseHandle (hObject=0xa4) returned 1 [0152.886] CloseHandle (hObject=0xa4) returned 1 [0152.888] CloseHandle (hObject=0xa8) returned 1 [0152.893] CloseHandle (hObject=0xa8) returned 1 [0152.895] CloseHandle (hObject=0xa8) returned 1 [0152.898] CloseHandle (hObject=0xa8) returned 1 [0152.899] CloseHandle (hObject=0xa8) returned 1 [0152.910] CloseHandle (hObject=0xa8) returned 1 [0152.912] CloseHandle (hObject=0xa4) returned 1 [0152.914] CloseHandle (hObject=0xa4) returned 1 [0152.950] CloseHandle (hObject=0xa4) returned 1 [0152.972] CloseHandle (hObject=0xa4) returned 1 [0152.981] CloseHandle (hObject=0xa4) returned 1 [0152.984] CloseHandle (hObject=0xa4) returned 1 [0153.000] CloseHandle (hObject=0xa0) returned 1 [0153.002] CloseHandle (hObject=0xa0) returned 1 [0153.004] CloseHandle (hObject=0xa0) returned 1 [0153.006] CloseHandle (hObject=0xa4) returned 1 [0153.015] CloseHandle (hObject=0xa4) returned 1 [0153.016] CloseHandle (hObject=0xa4) returned 1 [0153.019] CloseHandle (hObject=0xa8) returned 1 [0153.020] CloseHandle (hObject=0xa8) returned 1 [0153.032] CloseHandle (hObject=0xa8) returned 1 [0153.038] CloseHandle (hObject=0xac) returned 1 [0153.040] CloseHandle (hObject=0xac) returned 1 [0153.041] CloseHandle (hObject=0xac) returned 1 [0153.045] CloseHandle (hObject=0xa4) returned 1 [0153.047] CloseHandle (hObject=0xa4) returned 1 [0153.050] CloseHandle (hObject=0xa4) returned 1 [0153.062] CloseHandle (hObject=0xa0) returned 1 [0153.064] CloseHandle (hObject=0xa0) returned 1 [0153.066] CloseHandle (hObject=0xa0) returned 1 [0153.068] CloseHandle (hObject=0xa4) returned 1 [0153.070] CloseHandle (hObject=0xa4) returned 1 [0153.071] CloseHandle (hObject=0xa4) returned 1 [0153.074] CloseHandle (hObject=0xa8) returned 1 [0153.078] CloseHandle (hObject=0xa8) returned 1 [0153.080] CloseHandle (hObject=0xa8) returned 1 [0153.085] CloseHandle (hObject=0xac) returned 1 [0153.086] CloseHandle (hObject=0xac) returned 1 [0153.102] CloseHandle (hObject=0xac) returned 1 [0153.111] CloseHandle (hObject=0xa8) returned 1 [0153.115] CloseHandle (hObject=0xa8) returned 1 [0153.117] CloseHandle (hObject=0xa8) returned 1 [0153.123] CloseHandle (hObject=0xac) returned 1 [0153.129] CloseHandle (hObject=0xac) returned 1 [0153.131] CloseHandle (hObject=0xac) returned 1 [0153.135] CloseHandle (hObject=0xb0) returned 1 [0153.138] CloseHandle (hObject=0xb0) returned 1 [0153.139] CloseHandle (hObject=0xb0) returned 1 [0153.145] CloseHandle (hObject=0xb0) returned 1 [0153.148] CloseHandle (hObject=0xb0) returned 1 [0153.150] CloseHandle (hObject=0xb0) returned 1 [0153.183] CloseHandle (hObject=0xb0) returned 1 [0153.184] CloseHandle (hObject=0xb0) returned 1 [0153.188] CloseHandle (hObject=0xb0) returned 1 [0153.207] CloseHandle (hObject=0xa8) returned 1 [0153.209] CloseHandle (hObject=0xa8) returned 1 [0153.227] CloseHandle (hObject=0xa8) returned 1 [0153.232] CloseHandle (hObject=0xac) returned 1 [0153.234] CloseHandle (hObject=0xac) returned 1 [0153.238] CloseHandle (hObject=0xac) returned 1 [0153.240] CloseHandle (hObject=0xa4) returned 1 [0153.242] CloseHandle (hObject=0xa4) returned 1 [0153.245] CloseHandle (hObject=0xa4) returned 1 [0153.246] CloseHandle (hObject=0xa0) returned 1 [0153.250] CloseHandle (hObject=0xa0) returned 1 [0153.252] CloseHandle (hObject=0xa0) returned 1 [0153.263] CloseHandle (hObject=0xa4) returned 1 [0153.266] CloseHandle (hObject=0xa4) returned 1 [0153.267] CloseHandle (hObject=0xa4) returned 1 [0153.300] CloseHandle (hObject=0xa8) returned 1 [0153.300] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png.cryptoid"), dwFlags=0x2) returned 1 [0153.933] CloseHandle (hObject=0xa8) returned 1 [0153.934] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif.cryptoid"), dwFlags=0x2) returned 1 [0153.971] CloseHandle (hObject=0xa8) returned 1 [0153.971] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png.cryptoid"), dwFlags=0x2) returned 1 [0153.990] CloseHandle (hObject=0xa8) returned 1 [0153.991] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat.cryptoid"), dwFlags=0x2) returned 1 [0153.993] CloseHandle (hObject=0xa8) returned 1 [0154.004] CloseHandle (hObject=0xa8) returned 1 [0154.006] CloseHandle (hObject=0xa8) returned 1 [0154.010] CloseHandle (hObject=0xa8) returned 1 [0154.021] CloseHandle (hObject=0xa8) returned 1 [0154.024] CloseHandle (hObject=0xa8) returned 1 [0154.027] CloseHandle (hObject=0xa8) returned 1 [0154.029] CloseHandle (hObject=0xa8) returned 1 [0154.036] CloseHandle (hObject=0xa8) returned 1 [0154.052] CloseHandle (hObject=0xa4) returned 1 [0154.055] CloseHandle (hObject=0xa4) returned 1 [0154.057] CloseHandle (hObject=0xa4) returned 1 [0154.106] CloseHandle (hObject=0xa8) returned 1 [0154.107] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png.cryptoid"), dwFlags=0x2) returned 1 [0154.750] CloseHandle (hObject=0xa8) returned 1 [0154.751] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif.cryptoid"), dwFlags=0x2) returned 1 [0154.786] CloseHandle (hObject=0xa8) returned 1 [0154.787] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png.cryptoid"), dwFlags=0x2) returned 1 [0154.802] CloseHandle (hObject=0xa8) returned 1 [0154.803] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat.cryptoid"), dwFlags=0x2) returned 1 [0154.805] CloseHandle (hObject=0xa8) returned 1 [0154.824] CloseHandle (hObject=0xa8) returned 1 [0154.828] CloseHandle (hObject=0xa8) returned 1 [0154.830] CloseHandle (hObject=0xa8) returned 1 [0154.833] CloseHandle (hObject=0xa8) returned 1 [0154.834] CloseHandle (hObject=0xa8) returned 1 [0154.836] CloseHandle (hObject=0xa8) returned 1 [0154.843] CloseHandle (hObject=0xa8) returned 1 [0154.845] CloseHandle (hObject=0xa8) returned 1 [0154.846] CloseHandle (hObject=0xa8) returned 1 [0154.849] CloseHandle (hObject=0xa8) returned 1 [0154.850] CloseHandle (hObject=0xa8) returned 1 [0154.853] CloseHandle (hObject=0xa8) returned 1 [0154.861] CloseHandle (hObject=0xa8) returned 1 [0154.862] CloseHandle (hObject=0xa8) returned 1 [0154.864] CloseHandle (hObject=0xa8) returned 1 [0154.865] CloseHandle (hObject=0xa8) returned 1 [0154.868] CloseHandle (hObject=0xa8) returned 1 [0154.882] CloseHandle (hObject=0xa4) returned 1 [0154.883] CloseHandle (hObject=0xa4) returned 1 [0154.884] CloseHandle (hObject=0xa4) returned 1 [0154.892] CloseHandle (hObject=0xa8) returned 1 [0154.905] CloseHandle (hObject=0xa8) returned 1 [0154.906] CloseHandle (hObject=0xa8) returned 1 [0154.908] CloseHandle (hObject=0xa8) returned 1 [0154.911] CloseHandle (hObject=0xa8) returned 1 [0154.913] CloseHandle (hObject=0xa8) returned 1 [0154.927] CloseHandle (hObject=0xa8) returned 1 [0154.927] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\alerticon.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\alerticon.png.cryptoid"), dwFlags=0x2) returned 1 [0154.929] CloseHandle (hObject=0xa8) returned 1 [0154.932] CloseHandle (hObject=0xa8) returned 1 [0154.933] CloseHandle (hObject=0xa8) returned 1 [0154.935] CloseHandle (hObject=0xa8) returned 1 [0154.936] CloseHandle (hObject=0xa8) returned 1 [0154.938] CloseHandle (hObject=0xa8) returned 1 [0154.965] CloseHandle (hObject=0xa8) returned 1 [0154.966] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appblue.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appblue.png.cryptoid"), dwFlags=0x2) returned 1 [0154.980] CloseHandle (hObject=0xa8) returned 1 [0154.981] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorblue.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorblue.png.cryptoid"), dwFlags=0x2) returned 1 [0155.010] CloseHandle (hObject=0xa8) returned 1 [0155.011] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorwhite.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorwhite.png.cryptoid"), dwFlags=0x2) returned 1 [0155.018] CloseHandle (hObject=0xa8) returned 1 [0155.019] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appwhite.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appwhite.png.cryptoid"), dwFlags=0x2) returned 1 [0155.023] CloseHandle (hObject=0xa8) returned 1 [0155.035] CloseHandle (hObject=0xa8) returned 1 [0155.038] CloseHandle (hObject=0xa8) returned 1 [0155.041] CloseHandle (hObject=0xa8) returned 1 [0155.043] CloseHandle (hObject=0xa8) returned 1 [0155.045] CloseHandle (hObject=0xa8) returned 1 [0155.618] CloseHandle (hObject=0xa8) returned 1 [0155.618] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.gif.cryptoid"), dwFlags=0x2) returned 1 [0155.648] CloseHandle (hObject=0xa8) returned 1 [0155.649] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.png.cryptoid"), dwFlags=0x2) returned 1 [0155.653] CloseHandle (hObject=0xa8) returned 1 [0155.658] CloseHandle (hObject=0xa8) returned 1 [0155.660] CloseHandle (hObject=0xa8) returned 1 [0155.663] CloseHandle (hObject=0xa8) returned 1 [0155.667] CloseHandle (hObject=0xa8) returned 1 [0155.670] CloseHandle (hObject=0xa8) returned 1 [0155.676] CloseHandle (hObject=0xa8) returned 1 [0155.679] CloseHandle (hObject=0xa8) returned 1 [0155.680] CloseHandle (hObject=0xa8) returned 1 [0155.682] CloseHandle (hObject=0xa8) returned 1 [0155.685] CloseHandle (hObject=0xa8) returned 1 [0155.687] CloseHandle (hObject=0xa8) returned 1 [0155.691] CloseHandle (hObject=0xa8) returned 1 [0155.696] CloseHandle (hObject=0xa8) returned 1 [0155.698] CloseHandle (hObject=0xa8) returned 1 [0155.701] CloseHandle (hObject=0xa8) returned 1 [0155.705] CloseHandle (hObject=0xa8) returned 1 [0155.707] CloseHandle (hObject=0xa8) returned 1 [0155.711] CloseHandle (hObject=0xa8) returned 1 [0155.715] CloseHandle (hObject=0xa8) returned 1 [0155.718] CloseHandle (hObject=0xa8) returned 1 [0155.720] CloseHandle (hObject=0xa8) returned 1 [0155.741] CloseHandle (hObject=0xa8) returned 1 [0155.743] CloseHandle (hObject=0xa8) returned 1 [0155.789] CloseHandle (hObject=0xa8) returned 1 [0155.789] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\collectsynclogs.bat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\collectsynclogs.bat.cryptoid"), dwFlags=0x2) returned 1 [0155.792] CloseHandle (hObject=0xa8) returned 1 [0155.794] CloseHandle (hObject=0xa8) returned 1 [0155.796] CloseHandle (hObject=0xa8) returned 1 [0155.798] CloseHandle (hObject=0xa8) returned 1 [0155.800] CloseHandle (hObject=0xa8) returned 1 [0155.802] CloseHandle (hObject=0xa8) returned 1 [0155.806] CloseHandle (hObject=0xa8) returned 1 [0155.809] CloseHandle (hObject=0xa8) returned 1 [0155.810] CloseHandle (hObject=0xa8) returned 1 [0155.812] CloseHandle (hObject=0xa8) returned 1 [0155.814] CloseHandle (hObject=0xa8) returned 1 [0155.815] CloseHandle (hObject=0xa8) returned 1 [0155.818] CloseHandle (hObject=0xa8) returned 1 [0155.846] CloseHandle (hObject=0xa8) returned 1 [0155.847] CloseHandle (hObject=0xa8) returned 1 [0155.872] CloseHandle (hObject=0xa8) returned 1 [0155.873] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappblue.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappblue.png.cryptoid"), dwFlags=0x2) returned 1 [0155.887] CloseHandle (hObject=0xa8) returned 1 [0155.888] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappwhite.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappwhite.png.cryptoid"), dwFlags=0x2) returned 1 [0155.892] CloseHandle (hObject=0xa8) returned 1 [0155.895] CloseHandle (hObject=0xa8) returned 1 [0155.897] CloseHandle (hObject=0xa8) returned 1 [0155.899] CloseHandle (hObject=0xa8) returned 1 [0155.915] CloseHandle (hObject=0xa8) returned 1 [0155.916] CloseHandle (hObject=0xa8) returned 1 [0155.940] CloseHandle (hObject=0xa8) returned 1 [0155.941] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\error.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\error.png.cryptoid"), dwFlags=0x2) returned 1 [0155.954] CloseHandle (hObject=0xa8) returned 1 [0155.959] CloseHandle (hObject=0xa8) returned 1 [0155.961] CloseHandle (hObject=0xa8) returned 1 [0155.965] CloseHandle (hObject=0xa8) returned 1 [0155.969] CloseHandle (hObject=0xa8) returned 1 [0155.971] CloseHandle (hObject=0xa8) returned 1 [0155.975] CloseHandle (hObject=0xa8) returned 1 [0155.991] CloseHandle (hObject=0xa8) returned 1 [0155.993] CloseHandle (hObject=0xa8) returned 1 [0155.996] CloseHandle (hObject=0xa8) returned 1 [0156.000] CloseHandle (hObject=0xa8) returned 1 [0156.001] CloseHandle (hObject=0xa8) returned 1 [0156.004] CloseHandle (hObject=0xa8) returned 1 [0156.015] CloseHandle (hObject=0xa8) returned 1 [0156.018] CloseHandle (hObject=0xa8) returned 1 [0156.020] CloseHandle (hObject=0xa8) returned 1 [0156.025] CloseHandle (hObject=0xa8) returned 1 [0156.026] CloseHandle (hObject=0xa8) returned 1 [0156.032] CloseHandle (hObject=0xa8) returned 1 [0156.037] CloseHandle (hObject=0xa8) returned 1 [0156.038] CloseHandle (hObject=0xa8) returned 1 [0156.041] CloseHandle (hObject=0xa8) returned 1 [0156.049] CloseHandle (hObject=0xa8) returned 1 [0156.051] CloseHandle (hObject=0xa8) returned 1 [0156.054] CloseHandle (hObject=0xa8) returned 1 [0156.057] CloseHandle (hObject=0xa8) returned 1 [0156.059] CloseHandle (hObject=0xa8) returned 1 [0156.061] CloseHandle (hObject=0xa8) returned 1 [0156.068] CloseHandle (hObject=0xa8) returned 1 [0156.070] CloseHandle (hObject=0xa8) returned 1 [0156.072] CloseHandle (hObject=0xa8) returned 1 [0156.077] CloseHandle (hObject=0xa8) returned 1 [0156.079] CloseHandle (hObject=0xa8) returned 1 [0156.083] CloseHandle (hObject=0xa8) returned 1 [0156.086] CloseHandle (hObject=0xa8) returned 1 [0156.087] CloseHandle (hObject=0xa8) returned 1 [0156.090] CloseHandle (hObject=0xa8) returned 1 [0156.103] CloseHandle (hObject=0xa8) returned 1 [0156.104] CloseHandle (hObject=0xa8) returned 1 [0156.107] CloseHandle (hObject=0xa8) returned 1 [0156.111] CloseHandle (hObject=0xa8) returned 1 [0156.113] CloseHandle (hObject=0xa8) returned 1 [0156.120] CloseHandle (hObject=0xa8) returned 1 [0156.136] CloseHandle (hObject=0xa8) returned 1 [0156.138] CloseHandle (hObject=0xa8) returned 1 [0156.141] CloseHandle (hObject=0xa8) returned 1 [0156.146] CloseHandle (hObject=0xa8) returned 1 [0156.147] CloseHandle (hObject=0xa8) returned 1 [0156.150] CloseHandle (hObject=0xa8) returned 1 [0156.154] CloseHandle (hObject=0xa8) returned 1 [0156.155] CloseHandle (hObject=0xa8) returned 1 [0156.159] CloseHandle (hObject=0xa8) returned 1 [0156.170] CloseHandle (hObject=0xa8) returned 1 [0156.172] CloseHandle (hObject=0xa8) returned 1 [0156.174] CloseHandle (hObject=0xa8) returned 1 [0156.177] CloseHandle (hObject=0xa8) returned 1 [0156.179] CloseHandle (hObject=0xa8) returned 1 [0156.181] CloseHandle (hObject=0xa8) returned 1 [0156.185] CloseHandle (hObject=0xa8) returned 1 [0156.186] CloseHandle (hObject=0xa8) returned 1 [0156.191] CloseHandle (hObject=0xa8) returned 1 [0156.193] CloseHandle (hObject=0xa8) returned 1 [0156.194] CloseHandle (hObject=0xa8) returned 1 [0156.203] CloseHandle (hObject=0xac) returned 1 [0156.204] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\acmdismissicon.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\acmdismissicon.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.210] CloseHandle (hObject=0xac) returned 1 [0156.210] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\blurrect.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\blurrect.png.cryptoid"), dwFlags=0x2) returned 1 [0156.212] CloseHandle (hObject=0xac) returned 1 [0156.213] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_finished.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_finished.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.215] CloseHandle (hObject=0xac) returned 1 [0156.216] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_hovered.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_hovered.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.219] CloseHandle (hObject=0xac) returned 1 [0156.219] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.223] CloseHandle (hObject=0xac) returned 1 [0156.224] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_selected.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_selected.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.228] CloseHandle (hObject=0xac) returned 1 [0156.228] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevron.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevron.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.231] CloseHandle (hObject=0xac) returned 1 [0156.231] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevronup.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevronup.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.252] CloseHandle (hObject=0xac) returned 1 [0156.253] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\cloud.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\cloud.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.313] CloseHandle (hObject=0xac) returned 1 [0156.313] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\done_graphic.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\done_graphic.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.338] CloseHandle (hObject=0xac) returned 1 [0156.339] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\erroricon.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\erroricon.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.342] CloseHandle (hObject=0xac) returned 1 [0156.343] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.378] CloseHandle (hObject=0xac) returned 1 [0156.379] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_desktop.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_desktop.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.429] CloseHandle (hObject=0xac) returned 1 [0156.429] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_documents.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_documents.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.460] CloseHandle (hObject=0xac) returned 1 [0156.461] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_pictures.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_pictures.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.491] CloseHandle (hObject=0xac) returned 1 [0156.491] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\icebucket.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\icebucket.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.495] CloseHandle (hObject=0xac) returned 1 [0156.495] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.549] CloseHandle (hObject=0xac) returned 1 [0156.549] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading_spinner.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading_spinner.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.571] CloseHandle (hObject=0xac) returned 1 [0156.572] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandfiles.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandfiles.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.590] CloseHandle (hObject=0xac) returned 1 [0156.591] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandselectivesync.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandselectivesync.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.610] CloseHandle (hObject=0xac) returned 1 [0156.610] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\onedrivepremium.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\onedrivepremium.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.619] CloseHandle (hObject=0xac) returned 1 [0156.620] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowicon.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowicon.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.632] CloseHandle (hObject=0xac) returned 1 [0156.633] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowiconwhite.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowiconwhite.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.650] CloseHandle (hObject=0xac) returned 1 [0156.651] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\partiallyfreezing.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\partiallyfreezing.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.664] CloseHandle (hObject=0xac) returned 1 [0156.665] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settings.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settings.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.671] CloseHandle (hObject=0xac) returned 1 [0156.671] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settingsdisabled.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settingsdisabled.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.699] CloseHandle (hObject=0xac) returned 1 [0156.700] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\signin.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\signin.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.721] CloseHandle (hObject=0xac) returned 1 [0156.722] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\stackedicecubes.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\stackedicecubes.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.731] CloseHandle (hObject=0xac) returned 1 [0156.732] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\waterglass.svg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\waterglass.svg.cryptoid"), dwFlags=0x2) returned 1 [0156.734] CloseHandle (hObject=0xa8) returned 1 [0156.737] CloseHandle (hObject=0xa8) returned 1 [0156.740] CloseHandle (hObject=0xa8) returned 1 [0156.742] CloseHandle (hObject=0xa8) returned 1 [0156.757] CloseHandle (hObject=0xa8) returned 1 [0156.760] CloseHandle (hObject=0xa8) returned 1 [0156.762] CloseHandle (hObject=0xa8) returned 1 [0156.766] CloseHandle (hObject=0xa8) returned 1 [0156.769] CloseHandle (hObject=0xa8) returned 1 [0156.771] CloseHandle (hObject=0xa8) returned 1 [0156.775] CloseHandle (hObject=0xa8) returned 1 [0156.777] CloseHandle (hObject=0xa8) returned 1 [0156.783] CloseHandle (hObject=0xa8) returned 1 [0156.798] CloseHandle (hObject=0xa8) returned 1 [0156.801] CloseHandle (hObject=0xa8) returned 1 [0156.804] CloseHandle (hObject=0xa8) returned 1 [0156.809] CloseHandle (hObject=0xa8) returned 1 [0156.813] CloseHandle (hObject=0xa8) returned 1 [0156.829] CloseHandle (hObject=0xa8) returned 1 [0156.840] CloseHandle (hObject=0xa8) returned 1 [0156.843] CloseHandle (hObject=0xa8) returned 1 [0156.846] CloseHandle (hObject=0xa8) returned 1 [0156.853] CloseHandle (hObject=0xa8) returned 1 [0156.855] CloseHandle (hObject=0xa8) returned 1 [0156.859] CloseHandle (hObject=0xa8) returned 1 [0156.871] CloseHandle (hObject=0xa8) returned 1 [0156.875] CloseHandle (hObject=0xa8) returned 1 [0156.885] CloseHandle (hObject=0xa8) returned 1 [0156.893] CloseHandle (hObject=0xa8) returned 1 [0156.897] CloseHandle (hObject=0xa8) returned 1 [0156.917] CloseHandle (hObject=0xa8) returned 1 [0156.923] CloseHandle (hObject=0xa8) returned 1 [0156.937] CloseHandle (hObject=0xa8) returned 1 [0156.939] CloseHandle (hObject=0xa8) returned 1 [0156.960] CloseHandle (hObject=0xa8) returned 1 [0156.962] CloseHandle (hObject=0xa8) returned 1 [0156.972] CloseHandle (hObject=0xa8) returned 1 [0156.979] CloseHandle (hObject=0xa8) returned 1 [0157.165] CloseHandle (hObject=0xa8) returned 1 [0157.189] CloseHandle (hObject=0xa8) returned 1 [0157.250] CloseHandle (hObject=0xa8) returned 1 [0157.252] CloseHandle (hObject=0xa8) returned 1 [0157.270] CloseHandle (hObject=0xa8) returned 1 [0157.279] CloseHandle (hObject=0xa8) returned 1 [0157.301] CloseHandle (hObject=0xa8) returned 1 [0157.304] CloseHandle (hObject=0xa8) returned 1 [0157.308] CloseHandle (hObject=0xa8) returned 1 [0157.311] CloseHandle (hObject=0xa8) returned 1 [0157.313] CloseHandle (hObject=0xa8) returned 1 [0157.318] CloseHandle (hObject=0xa8) returned 1 [0157.320] CloseHandle (hObject=0xa8) returned 1 [0157.323] CloseHandle (hObject=0xa8) returned 1 [0157.328] CloseHandle (hObject=0xa8) returned 1 [0157.330] CloseHandle (hObject=0xa8) returned 1 [0157.334] CloseHandle (hObject=0xa8) returned 1 [0157.358] CloseHandle (hObject=0xa8) returned 1 [0157.360] CloseHandle (hObject=0xa8) returned 1 [0157.376] CloseHandle (hObject=0xa8) returned 1 [0157.380] CloseHandle (hObject=0xa8) returned 1 [0157.386] CloseHandle (hObject=0xa8) returned 1 [0157.390] CloseHandle (hObject=0xa8) returned 1 [0157.397] CloseHandle (hObject=0xa8) returned 1 [0157.401] CloseHandle (hObject=0xa8) returned 1 [0157.406] CloseHandle (hObject=0xa8) returned 1 [0157.424] CloseHandle (hObject=0xa8) returned 1 [0157.426] CloseHandle (hObject=0xa8) returned 1 [0157.434] CloseHandle (hObject=0xa8) returned 1 [0157.439] CloseHandle (hObject=0xa8) returned 1 [0157.441] CloseHandle (hObject=0xa8) returned 1 [0157.442] CloseHandle (hObject=0xa8) returned 1 [0157.452] CloseHandle (hObject=0xa8) returned 1 [0157.454] CloseHandle (hObject=0xa8) returned 1 [0157.465] CloseHandle (hObject=0xa8) returned 1 [0157.468] CloseHandle (hObject=0xa8) returned 1 [0157.469] CloseHandle (hObject=0xa8) returned 1 [0157.472] CloseHandle (hObject=0xa8) returned 1 [0157.478] CloseHandle (hObject=0xa8) returned 1 [0157.484] CloseHandle (hObject=0xa8) returned 1 [0157.496] CloseHandle (hObject=0xa8) returned 1 [0157.496] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivelogo.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivelogo.png.cryptoid"), dwFlags=0x2) returned 1 [0157.500] CloseHandle (hObject=0xa8) returned 1 [0157.504] CloseHandle (hObject=0xa8) returned 1 [0157.506] CloseHandle (hObject=0xa8) returned 1 [0157.508] CloseHandle (hObject=0xa8) returned 1 [0157.512] CloseHandle (hObject=0xa8) returned 1 [0157.521] CloseHandle (hObject=0xa8) returned 1 [0157.529] CloseHandle (hObject=0xa8) returned 1 [0157.533] CloseHandle (hObject=0xa8) returned 1 [0157.536] CloseHandle (hObject=0xa8) returned 1 [0157.538] CloseHandle (hObject=0xa8) returned 1 [0157.542] CloseHandle (hObject=0xa8) returned 1 [0157.545] CloseHandle (hObject=0xa8) returned 1 [0157.549] CloseHandle (hObject=0xa8) returned 1 [0157.551] CloseHandle (hObject=0xa8) returned 1 [0157.553] CloseHandle (hObject=0xa8) returned 1 [0157.555] CloseHandle (hObject=0xa8) returned 1 [0157.558] CloseHandle (hObject=0xa8) returned 1 [0157.560] CloseHandle (hObject=0xa8) returned 1 [0157.562] CloseHandle (hObject=0xa8) returned 1 [0157.577] CloseHandle (hObject=0xa8) returned 1 [0157.579] CloseHandle (hObject=0xa8) returned 1 [0157.581] CloseHandle (hObject=0xa8) returned 1 [0157.586] CloseHandle (hObject=0xa8) returned 1 [0157.589] CloseHandle (hObject=0xa8) returned 1 [0157.592] CloseHandle (hObject=0xa8) returned 1 [0157.607] CloseHandle (hObject=0xa8) returned 1 [0157.611] CloseHandle (hObject=0xa8) returned 1 [0157.628] CloseHandle (hObject=0xac) returned 1 [0157.630] CloseHandle (hObject=0xac) returned 1 [0157.633] CloseHandle (hObject=0xac) returned 1 [0157.634] CloseHandle (hObject=0xb0) returned 1 [0157.636] CloseHandle (hObject=0xb0) returned 1 [0157.643] CloseHandle (hObject=0xb0) returned 1 [0157.645] CloseHandle (hObject=0xb4) returned 1 [0157.648] CloseHandle (hObject=0xb4) returned 1 [0157.659] CloseHandle (hObject=0xb4) returned 1 [0157.661] CloseHandle (hObject=0xb8) returned 1 [0157.664] CloseHandle (hObject=0xb8) returned 1 [0157.666] CloseHandle (hObject=0xb8) returned 1 [0157.680] CloseHandle (hObject=0xb0) returned 1 [0157.683] CloseHandle (hObject=0xb0) returned 1 [0157.684] CloseHandle (hObject=0xb0) returned 1 [0157.690] CloseHandle (hObject=0xb0) returned 1 [0157.692] CloseHandle (hObject=0xb0) returned 1 [0157.694] CloseHandle (hObject=0xb0) returned 1 [0157.710] CloseHandle (hObject=0xb0) returned 1 [0157.712] CloseHandle (hObject=0xb0) returned 1 [0157.713] CloseHandle (hObject=0xb0) returned 1 [0157.719] CloseHandle (hObject=0xb0) returned 1 [0157.722] CloseHandle (hObject=0xb0) returned 1 [0157.724] CloseHandle (hObject=0xb0) returned 1 [0157.728] CloseHandle (hObject=0xb0) returned 1 [0157.731] CloseHandle (hObject=0xb0) returned 1 [0157.733] CloseHandle (hObject=0xb0) returned 1 [0157.741] CloseHandle (hObject=0xac) returned 1 [0157.743] CloseHandle (hObject=0xac) returned 1 [0157.746] CloseHandle (hObject=0xac) returned 1 [0157.774] CloseHandle (hObject=0xa8) returned 1 [0157.775] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotacritical.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotacritical.png.cryptoid"), dwFlags=0x2) returned 1 [0157.795] CloseHandle (hObject=0xa8) returned 1 [0157.795] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotaerror.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotaerror.png.cryptoid"), dwFlags=0x2) returned 1 [0157.822] CloseHandle (hObject=0xa8) returned 1 [0157.822] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotanearing.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotanearing.png.cryptoid"), dwFlags=0x2) returned 1 [0157.825] CloseHandle (hObject=0xa8) returned 1 [0157.830] CloseHandle (hObject=0xa8) returned 1 [0157.832] CloseHandle (hObject=0xa8) returned 1 [0157.835] CloseHandle (hObject=0xa8) returned 1 [0157.851] CloseHandle (hObject=0xa8) returned 1 [0157.854] CloseHandle (hObject=0xa8) returned 1 [0157.857] CloseHandle (hObject=0xa8) returned 1 [0157.862] CloseHandle (hObject=0xa8) returned 1 [0157.865] CloseHandle (hObject=0xa8) returned 1 [0157.868] CloseHandle (hObject=0xa8) returned 1 [0157.872] CloseHandle (hObject=0xa8) returned 1 [0157.874] CloseHandle (hObject=0xa8) returned 1 [0157.877] CloseHandle (hObject=0xa8) returned 1 [0157.884] CloseHandle (hObject=0xa8) returned 1 [0157.887] CloseHandle (hObject=0xa8) returned 1 [0158.349] CloseHandle (hObject=0xa8) returned 1 [0158.350] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\screenshotoptin.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\screenshotoptin.gif.cryptoid"), dwFlags=0x2) returned 1 [0158.355] CloseHandle (hObject=0xa8) returned 1 [0158.359] CloseHandle (hObject=0xa8) returned 1 [0158.363] CloseHandle (hObject=0xa8) returned 1 [0158.371] CloseHandle (hObject=0xa8) returned 1 [0158.374] CloseHandle (hObject=0xa8) returned 1 [0158.377] CloseHandle (hObject=0xa8) returned 1 [0158.381] CloseHandle (hObject=0xa8) returned 1 [0158.401] CloseHandle (hObject=0xa8) returned 1 [0158.403] CloseHandle (hObject=0xa8) returned 1 [0158.405] CloseHandle (hObject=0xa8) returned 1 [0158.408] CloseHandle (hObject=0xa8) returned 1 [0158.410] CloseHandle (hObject=0xa8) returned 1 [0158.414] CloseHandle (hObject=0xa8) returned 1 [0158.433] CloseHandle (hObject=0xa8) returned 1 [0158.436] CloseHandle (hObject=0xa8) returned 1 [0158.440] CloseHandle (hObject=0xa8) returned 1 [0158.444] CloseHandle (hObject=0xa8) returned 1 [0158.448] CloseHandle (hObject=0xa8) returned 1 [0158.451] CloseHandle (hObject=0xa8) returned 1 [0158.456] CloseHandle (hObject=0xa8) returned 1 [0158.459] CloseHandle (hObject=0xa8) returned 1 [0158.463] CloseHandle (hObject=0xa8) returned 1 [0158.477] CloseHandle (hObject=0xa8) returned 1 [0158.480] CloseHandle (hObject=0xa8) returned 1 [0158.492] CloseHandle (hObject=0xa8) returned 1 [0158.496] CloseHandle (hObject=0xa8) returned 1 [0158.499] CloseHandle (hObject=0xa8) returned 1 [0158.503] CloseHandle (hObject=0xa8) returned 1 [0158.508] CloseHandle (hObject=0xa8) returned 1 [0158.510] CloseHandle (hObject=0xa8) returned 1 [0158.516] CloseHandle (hObject=0xa8) returned 1 [0158.529] CloseHandle (hObject=0xa8) returned 1 [0158.532] CloseHandle (hObject=0xa8) returned 1 [0158.536] CloseHandle (hObject=0xa8) returned 1 [0158.542] CloseHandle (hObject=0xa8) returned 1 [0158.546] CloseHandle (hObject=0xa8) returned 1 [0158.551] CloseHandle (hObject=0xa8) returned 1 [0158.558] CloseHandle (hObject=0xa8) returned 1 [0158.560] CloseHandle (hObject=0xa8) returned 1 [0158.566] CloseHandle (hObject=0xa8) returned 1 [0158.582] CloseHandle (hObject=0xa8) returned 1 [0158.585] CloseHandle (hObject=0xa8) returned 1 [0158.684] CloseHandle (hObject=0xa8) returned 1 [0158.684] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt.cryptoid"), dwFlags=0x2) returned 1 [0158.688] CloseHandle (hObject=0xa8) returned 1 [0158.693] CloseHandle (hObject=0xa8) returned 1 [0158.707] CloseHandle (hObject=0xa8) returned 1 [0158.709] CloseHandle (hObject=0xa8) returned 1 [0158.728] CloseHandle (hObject=0xa8) returned 1 [0158.730] CloseHandle (hObject=0xa8) returned 1 [0158.733] CloseHandle (hObject=0xa8) returned 1 [0158.736] CloseHandle (hObject=0xa8) returned 1 [0158.738] CloseHandle (hObject=0xa8) returned 1 [0158.746] CloseHandle (hObject=0xa8) returned 1 [0158.754] CloseHandle (hObject=0xa8) returned 1 [0158.755] CloseHandle (hObject=0xa8) returned 1 [0158.758] CloseHandle (hObject=0xa8) returned 1 [0158.772] CloseHandle (hObject=0xa8) returned 1 [0158.775] CloseHandle (hObject=0xa8) returned 1 [0158.777] CloseHandle (hObject=0xa8) returned 1 [0158.781] CloseHandle (hObject=0xa8) returned 1 [0158.784] CloseHandle (hObject=0xa8) returned 1 [0158.789] CloseHandle (hObject=0xa8) returned 1 [0158.793] CloseHandle (hObject=0xa8) returned 1 [0158.795] CloseHandle (hObject=0xa8) returned 1 [0158.802] CloseHandle (hObject=0xa8) returned 1 [0158.811] CloseHandle (hObject=0xa8) returned 1 [0158.814] CloseHandle (hObject=0xa8) returned 1 [0158.816] CloseHandle (hObject=0xa8) returned 1 [0158.819] CloseHandle (hObject=0xa8) returned 1 [0158.823] CloseHandle (hObject=0xa8) returned 1 [0158.827] CloseHandle (hObject=0xa8) returned 1 [0158.831] CloseHandle (hObject=0xa8) returned 1 [0158.833] CloseHandle (hObject=0xa8) returned 1 [0158.850] CloseHandle (hObject=0xa8) returned 1 [0158.851] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\warning.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\warning.png.cryptoid"), dwFlags=0x2) returned 1 [0158.856] CloseHandle (hObject=0xa8) returned 1 [0158.872] CloseHandle (hObject=0xa8) returned 1 [0158.874] CloseHandle (hObject=0xa8) returned 1 [0158.878] CloseHandle (hObject=0xa8) returned 1 [0158.901] CloseHandle (hObject=0xa8) returned 1 [0158.903] CloseHandle (hObject=0xa8) returned 1 [0158.906] CloseHandle (hObject=0xa8) returned 1 [0158.912] CloseHandle (hObject=0xa8) returned 1 [0158.914] CloseHandle (hObject=0xa8) returned 1 [0158.916] CloseHandle (hObject=0xa8) returned 1 [0158.919] CloseHandle (hObject=0xa8) returned 1 [0158.921] CloseHandle (hObject=0xa8) returned 1 [0158.932] CloseHandle (hObject=0xa8) returned 1 [0158.935] CloseHandle (hObject=0xa8) returned 1 [0158.936] CloseHandle (hObject=0xa8) returned 1 [0158.938] CloseHandle (hObject=0xa8) returned 1 [0158.951] CloseHandle (hObject=0xa8) returned 1 [0158.953] CloseHandle (hObject=0xa8) returned 1 [0158.956] CloseHandle (hObject=0xa4) returned 1 [0158.966] CloseHandle (hObject=0xa4) returned 1 [0158.969] CloseHandle (hObject=0xa4) returned 1 [0158.979] CloseHandle (hObject=0xa8) returned 1 [0158.981] CloseHandle (hObject=0xa8) returned 1 [0158.982] CloseHandle (hObject=0xa8) returned 1 [0158.993] CloseHandle (hObject=0xa8) returned 1 [0158.994] CloseHandle (hObject=0xa8) returned 1 [0158.995] CloseHandle (hObject=0xa8) returned 1 [0158.997] CloseHandle (hObject=0xa4) returned 1 [0158.997] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivepersonal.cmd"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivepersonal.cmd.cryptoid"), dwFlags=0x2) returned 1 [0158.999] CloseHandle (hObject=0xa4) returned 1 [0159.002] CloseHandle (hObject=0xa4) returned 1 [0159.013] CloseHandle (hObject=0xa4) returned 1 [0159.017] CloseHandle (hObject=0xa8) returned 1 [0159.019] CloseHandle (hObject=0xa8) returned 1 [0159.020] CloseHandle (hObject=0xa8) returned 1 [0159.024] CloseHandle (hObject=0xa4) returned 1 [0159.027] CloseHandle (hObject=0xa4) returned 1 [0159.028] CloseHandle (hObject=0xa4) returned 1 [0159.030] CloseHandle (hObject=0xa0) returned 1 [0159.033] CloseHandle (hObject=0xa0) returned 1 [0159.041] CloseHandle (hObject=0xa0) returned 1 [0159.044] CloseHandle (hObject=0xa4) returned 1 [0159.046] CloseHandle (hObject=0xa4) returned 1 [0159.049] CloseHandle (hObject=0xa4) returned 1 [0159.052] CloseHandle (hObject=0xa8) returned 1 [0159.054] CloseHandle (hObject=0xa8) returned 1 [0159.066] CloseHandle (hObject=0xa8) returned 1 [0159.072] CloseHandle (hObject=0xa8) returned 1 [0159.074] CloseHandle (hObject=0xa8) returned 1 [0159.076] CloseHandle (hObject=0xa8) returned 1 [0159.080] CloseHandle (hObject=0xac) returned 1 [0159.081] CloseHandle (hObject=0xac) returned 1 [0159.086] CloseHandle (hObject=0xac) returned 1 [0159.088] CloseHandle (hObject=0xa0) returned 1 [0159.090] CloseHandle (hObject=0xa0) returned 1 [0159.097] CloseHandle (hObject=0xa0) returned 1 [0159.100] CloseHandle (hObject=0xa4) returned 1 [0159.103] CloseHandle (hObject=0xa4) returned 1 [0159.106] CloseHandle (hObject=0xa4) returned 1 [0159.109] CloseHandle (hObject=0xa0) returned 1 [0159.112] CloseHandle (hObject=0xa0) returned 1 [0159.114] CloseHandle (hObject=0xa0) returned 1 [0159.116] CloseHandle (hObject=0xa4) returned 1 [0159.125] CloseHandle (hObject=0xa4) returned 1 [0159.127] CloseHandle (hObject=0xa4) returned 1 [0159.128] CloseHandle (hObject=0xa8) returned 1 [0159.129] CloseHandle (hObject=0xa8) returned 1 [0159.131] CloseHandle (hObject=0xa8) returned 1 [0159.134] CloseHandle (hObject=0xa0) returned 1 [0159.136] CloseHandle (hObject=0xa0) returned 1 [0159.148] CloseHandle (hObject=0xa0) returned 1 [0159.151] CloseHandle (hObject=0xa0) returned 1 [0159.153] CloseHandle (hObject=0xa0) returned 1 [0159.158] CloseHandle (hObject=0xa0) returned 1 [0159.160] CloseHandle (hObject=0xa0) returned 1 [0159.164] CloseHandle (hObject=0xa0) returned 1 [0159.168] CloseHandle (hObject=0xa0) returned 1 [0159.170] CloseHandle (hObject=0xa4) returned 1 [0159.173] CloseHandle (hObject=0xa4) returned 1 [0159.175] CloseHandle (hObject=0xa4) returned 1 [0159.179] CloseHandle (hObject=0xa0) returned 1 [0159.181] CloseHandle (hObject=0xa0) returned 1 [0159.182] CloseHandle (hObject=0xa0) returned 1 [0159.186] CloseHandle (hObject=0xa4) returned 1 [0159.187] CloseHandle (hObject=0xa4) returned 1 [0159.189] CloseHandle (hObject=0xa4) returned 1 [0159.192] CloseHandle (hObject=0xa4) returned 1 [0159.204] CloseHandle (hObject=0xa4) returned 1 [0159.206] CloseHandle (hObject=0xa4) returned 1 [0159.208] CloseHandle (hObject=0xa8) returned 1 [0159.208] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat.cryptoid"), dwFlags=0x2) returned 1 [0159.210] CloseHandle (hObject=0xa0) returned 1 [0159.213] CloseHandle (hObject=0xa0) returned 1 [0159.215] CloseHandle (hObject=0xa0) returned 1 [0159.652] CloseHandle (hObject=0xa4) returned 1 [0159.653] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\visio\\content16.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\visio\\content16.dat.cryptoid"), dwFlags=0x2) returned 1 [0159.659] CloseHandle (hObject=0xa0) returned 1 [0159.660] CloseHandle (hObject=0xa0) returned 1 [0159.662] CloseHandle (hObject=0xa0) returned 1 [0159.665] CloseHandle (hObject=0xa4) returned 1 [0159.667] CloseHandle (hObject=0xa4) returned 1 [0159.682] CloseHandle (hObject=0xa4) returned 1 [0159.685] CloseHandle (hObject=0xa4) returned 1 [0159.686] CloseHandle (hObject=0xa4) returned 1 [0159.690] CloseHandle (hObject=0xa4) returned 1 [0159.692] CloseHandle (hObject=0xa4) returned 1 [0159.694] CloseHandle (hObject=0xa4) returned 1 [0159.696] CloseHandle (hObject=0xa4) returned 1 [0159.702] CloseHandle (hObject=0xa4) returned 1 [0159.703] CloseHandle (hObject=0xa4) returned 1 [0159.708] CloseHandle (hObject=0xa4) returned 1 [0159.726] CloseHandle (hObject=0xa8) returned 1 [0159.727] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{219d4102-8477-4da3-b68d-cbeb50436a31}.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{219d4102-8477-4da3-b68d-cbeb50436a31}.png.cryptoid"), dwFlags=0x2) returned 1 [0159.743] CloseHandle (hObject=0xa8) returned 1 [0159.744] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3142f004-ad96-48e4-b756-4d6f73d1b9c8}.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3142f004-ad96-48e4-b756-4d6f73d1b9c8}.png.cryptoid"), dwFlags=0x2) returned 1 [0159.766] CloseHandle (hObject=0xa8) returned 1 [0159.767] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{46f14cba-a8c3-4ab0-8748-f3a8c35622b4}.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{46f14cba-a8c3-4ab0-8748-f3a8c35622b4}.png.cryptoid"), dwFlags=0x2) returned 1 [0159.787] CloseHandle (hObject=0xa8) returned 1 [0159.787] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{5c217167-4731-4afd-b181-6274e3dfbf25}.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{5c217167-4731-4afd-b181-6274e3dfbf25}.png.cryptoid"), dwFlags=0x2) returned 1 [0159.804] CloseHandle (hObject=0xa8) returned 1 [0159.805] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{708686a3-2087-4b70-81fb-7f608ad7f5d4}.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{708686a3-2087-4b70-81fb-7f608ad7f5d4}.png.cryptoid"), dwFlags=0x2) returned 1 [0159.820] CloseHandle (hObject=0xa8) returned 1 [0159.821] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a90eda99-693c-4259-af53-d06f3bbaeeab}.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a90eda99-693c-4259-af53-d06f3bbaeeab}.png.cryptoid"), dwFlags=0x2) returned 1 [0159.833] CloseHandle (hObject=0xa8) returned 1 [0159.833] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a95b47fd-465d-4ace-a006-dccc9033e6db}.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a95b47fd-465d-4ace-a006-dccc9033e6db}.png.cryptoid"), dwFlags=0x2) returned 1 [0159.848] CloseHandle (hObject=0xa8) returned 1 [0159.849] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{ae613841-f649-4cd7-af4a-2e7b7d99e12e}.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{ae613841-f649-4cd7-af4a-2e7b7d99e12e}.png.cryptoid"), dwFlags=0x2) returned 1 [0159.872] CloseHandle (hObject=0xa8) returned 1 [0159.873] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b5d14e8c-339b-4360-b40c-a274f460b417}.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b5d14e8c-339b-4360-b40c-a274f460b417}.png.cryptoid"), dwFlags=0x2) returned 1 [0159.880] CloseHandle (hObject=0xa8) returned 1 [0159.880] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b6815740-f01e-4e9e-aa05-d3cde47c3ddc}.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b6815740-f01e-4e9e-aa05-d3cde47c3ddc}.png.cryptoid"), dwFlags=0x2) returned 1 [0159.899] CloseHandle (hObject=0xa8) returned 1 [0159.899] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{c20f58c1-cdd0-45f9-9954-bdf0782633cb}.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{c20f58c1-cdd0-45f9-9954-bdf0782633cb}.png.cryptoid"), dwFlags=0x2) returned 1 [0159.920] CloseHandle (hObject=0xa8) returned 1 [0159.920] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{d1cc3a2e-2bc2-4715-ad4c-90b4ca0868c0}.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{d1cc3a2e-2bc2-4715-ad4c-90b4ca0868c0}.png.cryptoid"), dwFlags=0x2) returned 1 [0159.923] CloseHandle (hObject=0xa4) returned 1 [0159.926] CloseHandle (hObject=0xa4) returned 1 [0159.927] CloseHandle (hObject=0xa4) returned 1 [0159.929] CloseHandle (hObject=0xa8) returned 1 [0159.929] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0159.931] CloseHandle (hObject=0xa8) returned 1 [0159.934] CloseHandle (hObject=0xa8) returned 1 [0159.936] CloseHandle (hObject=0xa8) returned 1 [0159.937] CloseHandle (hObject=0xac) returned 1 [0159.937] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\ygieuwa9\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\ygieuwa9\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0159.939] CloseHandle (hObject=0xa4) returned 1 [0159.940] CloseHandle (hObject=0xa4) returned 1 [0159.941] CloseHandle (hObject=0xa4) returned 1 [0159.946] CloseHandle (hObject=0xa8) returned 1 [0159.968] CloseHandle (hObject=0xa8) returned 1 [0159.969] CloseHandle (hObject=0xa8) returned 1 [0159.971] CloseHandle (hObject=0xa8) returned 1 [0159.975] CloseHandle (hObject=0xa8) returned 1 [0159.976] CloseHandle (hObject=0xa8) returned 1 [0159.978] CloseHandle (hObject=0xa8) returned 1 [0159.983] CloseHandle (hObject=0xa8) returned 1 [0159.985] CloseHandle (hObject=0xa8) returned 1 [0159.987] CloseHandle (hObject=0xa8) returned 1 [0159.990] CloseHandle (hObject=0xa8) returned 1 [0159.991] CloseHandle (hObject=0xa8) returned 1 [0160.007] CloseHandle (hObject=0xa8) returned 1 [0160.008] CloseHandle (hObject=0xa8) returned 1 [0160.009] CloseHandle (hObject=0xa8) returned 1 [0160.018] CloseHandle (hObject=0xa8) returned 1 [0160.020] CloseHandle (hObject=0xa8) returned 1 [0160.021] CloseHandle (hObject=0xa8) returned 1 [0160.040] CloseHandle (hObject=0xa8) returned 1 [0160.042] CloseHandle (hObject=0xa8) returned 1 [0160.043] CloseHandle (hObject=0xa8) returned 1 [0160.045] CloseHandle (hObject=0xa8) returned 1 [0160.059] CloseHandle (hObject=0xa8) returned 1 [0160.061] CloseHandle (hObject=0xa8) returned 1 [0160.063] CloseHandle (hObject=0xa8) returned 1 [0160.069] CloseHandle (hObject=0xa8) returned 1 [0160.070] CloseHandle (hObject=0xa8) returned 1 [0160.072] CloseHandle (hObject=0xa8) returned 1 [0160.075] CloseHandle (hObject=0xa8) returned 1 [0160.076] CloseHandle (hObject=0xa8) returned 1 [0160.088] CloseHandle (hObject=0xa8) returned 1 [0160.090] CloseHandle (hObject=0xa8) returned 1 [0160.092] CloseHandle (hObject=0xa8) returned 1 [0160.102] CloseHandle (hObject=0xa8) returned 1 [0160.103] CloseHandle (hObject=0xa8) returned 1 [0160.104] CloseHandle (hObject=0xa8) returned 1 [0160.123] CloseHandle (hObject=0xa8) returned 1 [0160.124] CloseHandle (hObject=0xa8) returned 1 [0160.126] CloseHandle (hObject=0xa8) returned 1 [0160.128] CloseHandle (hObject=0xa8) returned 1 [0160.143] CloseHandle (hObject=0xa8) returned 1 [0160.144] CloseHandle (hObject=0xa8) returned 1 [0160.165] CloseHandle (hObject=0xa8) returned 1 [0160.166] CloseHandle (hObject=0xa8) returned 1 [0160.167] CloseHandle (hObject=0xa8) returned 1 [0160.171] CloseHandle (hObject=0xa8) returned 1 [0160.172] CloseHandle (hObject=0xa8) returned 1 [0160.174] CloseHandle (hObject=0xa8) returned 1 [0160.175] CloseHandle (hObject=0xa8) returned 1 [0160.188] CloseHandle (hObject=0xa8) returned 1 [0160.189] CloseHandle (hObject=0xa8) returned 1 [0160.191] CloseHandle (hObject=0xa8) returned 1 [0160.200] CloseHandle (hObject=0xa8) returned 1 [0160.201] CloseHandle (hObject=0xa8) returned 1 [0160.203] CloseHandle (hObject=0xa8) returned 1 [0160.205] CloseHandle (hObject=0xa8) returned 1 [0160.207] CloseHandle (hObject=0xa8) returned 1 [0160.211] CloseHandle (hObject=0xa8) returned 1 [0160.213] CloseHandle (hObject=0xa8) returned 1 [0160.214] CloseHandle (hObject=0xa8) returned 1 [0160.223] CloseHandle (hObject=0xa8) returned 1 [0160.224] CloseHandle (hObject=0xa8) returned 1 [0160.225] CloseHandle (hObject=0xa8) returned 1 [0160.227] CloseHandle (hObject=0xa8) returned 1 [0160.240] CloseHandle (hObject=0xa8) returned 1 [0160.242] CloseHandle (hObject=0xa8) returned 1 [0160.243] CloseHandle (hObject=0xa8) returned 1 [0160.246] CloseHandle (hObject=0xa8) returned 1 [0160.247] CloseHandle (hObject=0xa8) returned 1 [0160.249] CloseHandle (hObject=0xa8) returned 1 [0160.258] CloseHandle (hObject=0xa8) returned 1 [0160.259] CloseHandle (hObject=0xa8) returned 1 [0160.262] CloseHandle (hObject=0xa8) returned 1 [0160.264] CloseHandle (hObject=0xa8) returned 1 [0160.265] CloseHandle (hObject=0xa8) returned 1 [0160.266] CloseHandle (hObject=0xa8) returned 1 [0160.269] CloseHandle (hObject=0xa8) returned 1 [0160.270] CloseHandle (hObject=0xa8) returned 1 [0160.272] CloseHandle (hObject=0xa8) returned 1 [0160.283] CloseHandle (hObject=0xa8) returned 1 [0160.284] CloseHandle (hObject=0xa8) returned 1 [0160.288] CloseHandle (hObject=0xa8) returned 1 [0160.289] CloseHandle (hObject=0xa8) returned 1 [0160.291] CloseHandle (hObject=0xa8) returned 1 [0160.293] CloseHandle (hObject=0xa8) returned 1 [0160.295] CloseHandle (hObject=0xa8) returned 1 [0160.297] CloseHandle (hObject=0xa8) returned 1 [0160.299] CloseHandle (hObject=0xa8) returned 1 [0160.308] CloseHandle (hObject=0xa8) returned 1 [0160.310] CloseHandle (hObject=0xa8) returned 1 [0160.322] CloseHandle (hObject=0xa8) returned 1 [0160.323] CloseHandle (hObject=0xa8) returned 1 [0160.325] CloseHandle (hObject=0xa8) returned 1 [0160.327] CloseHandle (hObject=0xa8) returned 1 [0160.330] CloseHandle (hObject=0xa8) returned 1 [0160.331] CloseHandle (hObject=0xa8) returned 1 [0160.332] CloseHandle (hObject=0xa8) returned 1 [0160.351] CloseHandle (hObject=0xa8) returned 1 [0160.352] CloseHandle (hObject=0xa8) returned 1 [0160.356] CloseHandle (hObject=0xa8) returned 1 [0160.357] CloseHandle (hObject=0xa8) returned 1 [0160.359] CloseHandle (hObject=0xa8) returned 1 [0160.363] CloseHandle (hObject=0xa8) returned 1 [0160.364] CloseHandle (hObject=0xa8) returned 1 [0160.365] CloseHandle (hObject=0xa8) returned 1 [0160.414] CloseHandle (hObject=0xa8) returned 1 [0160.416] CloseHandle (hObject=0xa8) returned 1 [0160.417] CloseHandle (hObject=0xa8) returned 1 [0160.424] CloseHandle (hObject=0xa8) returned 1 [0160.425] CloseHandle (hObject=0xa8) returned 1 [0160.426] CloseHandle (hObject=0xa8) returned 1 [0160.444] CloseHandle (hObject=0xa8) returned 1 [0160.445] CloseHandle (hObject=0xa8) returned 1 [0160.447] CloseHandle (hObject=0xa8) returned 1 [0160.448] CloseHandle (hObject=0xa8) returned 1 [0160.464] CloseHandle (hObject=0xa8) returned 1 [0160.465] CloseHandle (hObject=0xa8) returned 1 [0160.473] CloseHandle (hObject=0xa8) returned 1 [0160.474] CloseHandle (hObject=0xa8) returned 1 [0160.478] CloseHandle (hObject=0xa8) returned 1 [0160.496] CloseHandle (hObject=0xa4) returned 1 [0160.499] CloseHandle (hObject=0xa4) returned 1 [0160.537] CloseHandle (hObject=0xa4) returned 1 [0160.539] CloseHandle (hObject=0xa8) returned 1 [0160.541] CloseHandle (hObject=0xa8) returned 1 [0160.549] CloseHandle (hObject=0xa8) returned 1 [0160.551] CloseHandle (hObject=0xa8) returned 1 [0160.553] CloseHandle (hObject=0xa8) returned 1 [0160.557] CloseHandle (hObject=0xa8) returned 1 [0160.559] CloseHandle (hObject=0xa4) returned 1 [0160.560] CloseHandle (hObject=0xa4) returned 1 [0160.562] CloseHandle (hObject=0xa4) returned 1 [0160.585] CloseHandle (hObject=0xa8) returned 1 [0160.586] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db.cryptoid"), dwFlags=0x2) returned 1 [0160.612] CloseHandle (hObject=0xa8) returned 1 [0160.612] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db.cryptoid"), dwFlags=0x2) returned 1 [0161.303] CloseHandle (hObject=0xa8) returned 1 [0161.303] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{2546d910-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{2546d910-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db.cryptoid"), dwFlags=0x2) returned 1 [0161.463] CloseHandle (hObject=0xa8) returned 1 [0161.464] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x000000000000003c.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x000000000000003c.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x000000000000003c.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x000000000000003c.db.cryptoid"), dwFlags=0x2) returned 1 [0161.644] CloseHandle (hObject=0xa8) returned 1 [0161.644] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x000000000000003d.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x000000000000003d.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x000000000000003d.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x000000000000003d.db.cryptoid"), dwFlags=0x2) returned 1 [0161.744] CloseHandle (hObject=0xa8) returned 1 [0161.744] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db.cryptoid"), dwFlags=0x2) returned 1 [0161.862] CloseHandle (hObject=0xa8) returned 1 [0161.862] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001d.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001d.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001d.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001d.db.cryptoid"), dwFlags=0x2) returned 1 [0161.864] CloseHandle (hObject=0xa4) returned 1 [0161.866] CloseHandle (hObject=0xa4) returned 1 [0161.868] CloseHandle (hObject=0xa4) returned 1 [0161.871] CloseHandle (hObject=0xa8) returned 1 [0161.871] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db.cryptoid"), dwFlags=0x2) returned 1 [0162.530] CloseHandle (hObject=0xa8) returned 1 [0162.531] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db.cryptoid"), dwFlags=0x2) returned 1 [0162.535] CloseHandle (hObject=0xa8) returned 1 [0162.536] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db.cryptoid"), dwFlags=0x2) returned 1 [0162.541] CloseHandle (hObject=0xa8) returned 1 [0162.541] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db.cryptoid"), dwFlags=0x2) returned 1 [0162.543] CloseHandle (hObject=0xa8) returned 1 [0162.544] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db.cryptoid"), dwFlags=0x2) returned 1 [0163.255] CloseHandle (hObject=0xa8) returned 1 [0163.256] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db.cryptoid"), dwFlags=0x2) returned 1 [0163.903] CloseHandle (hObject=0xa8) returned 1 [0163.903] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db.cryptoid"), dwFlags=0x2) returned 1 [0163.905] CloseHandle (hObject=0xa8) returned 1 [0163.906] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db.cryptoid"), dwFlags=0x2) returned 1 [0163.908] CloseHandle (hObject=0xa8) returned 1 [0163.908] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db.cryptoid"), dwFlags=0x2) returned 1 [0163.911] CloseHandle (hObject=0xa8) returned 1 [0163.911] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db.cryptoid"), dwFlags=0x2) returned 1 [0163.914] CloseHandle (hObject=0xa8) returned 1 [0163.914] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db.cryptoid"), dwFlags=0x2) returned 1 [0163.925] CloseHandle (hObject=0xa8) returned 1 [0163.926] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db.cryptoid"), dwFlags=0x2) returned 1 [0163.928] CloseHandle (hObject=0xa8) returned 1 [0163.929] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db.cryptoid"), dwFlags=0x2) returned 1 [0163.931] CloseHandle (hObject=0xa8) returned 1 [0163.932] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db.cryptoid"), dwFlags=0x2) returned 1 [0163.934] CloseHandle (hObject=0xa8) returned 1 [0163.934] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db.cryptoid"), dwFlags=0x2) returned 1 [0163.936] CloseHandle (hObject=0xa8) returned 1 [0163.937] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db.cryptoid"), dwFlags=0x2) returned 1 [0163.939] CloseHandle (hObject=0xa8) returned 1 [0163.939] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db.cryptoid"), dwFlags=0x2) returned 1 [0163.941] CloseHandle (hObject=0xa8) returned 1 [0163.942] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db.cryptoid"), dwFlags=0x2) returned 1 [0164.588] CloseHandle (hObject=0xa8) returned 1 [0164.588] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db.cryptoid"), dwFlags=0x2) returned 1 [0164.591] CloseHandle (hObject=0xa8) returned 1 [0164.592] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db.cryptoid"), dwFlags=0x2) returned 1 [0165.222] CloseHandle (hObject=0xa8) returned 1 [0165.222] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db.cryptoid"), dwFlags=0x2) returned 1 [0165.711] CloseHandle (hObject=0xa8) returned 1 [0165.711] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db.cryptoid"), dwFlags=0x2) returned 1 [0165.713] CloseHandle (hObject=0xa8) returned 1 [0165.713] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db.cryptoid"), dwFlags=0x2) returned 1 [0165.716] CloseHandle (hObject=0xa8) returned 1 [0165.716] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db.cryptoid"), dwFlags=0x2) returned 1 [0165.718] CloseHandle (hObject=0xa8) returned 1 [0165.718] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db.cryptoid"), dwFlags=0x2) returned 1 [0165.720] CloseHandle (hObject=0xa8) returned 1 [0165.721] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db.cryptoid"), dwFlags=0x2) returned 1 [0165.729] CloseHandle (hObject=0xa8) returned 1 [0165.729] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db.cryptoid"), dwFlags=0x2) returned 1 [0165.732] CloseHandle (hObject=0xa8) returned 1 [0165.732] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db.cryptoid"), dwFlags=0x2) returned 1 [0165.734] CloseHandle (hObject=0xa8) returned 1 [0165.734] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db.cryptoid"), dwFlags=0x2) returned 1 [0165.736] CloseHandle (hObject=0xa8) returned 1 [0165.736] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db.cryptoid"), dwFlags=0x2) returned 1 [0165.742] CloseHandle (hObject=0xa4) returned 1 [0165.743] CloseHandle (hObject=0xa4) returned 1 [0165.746] CloseHandle (hObject=0xa4) returned 1 [0165.747] CloseHandle (hObject=0xa4) returned 1 [0165.749] CloseHandle (hObject=0xa4) returned 1 [0165.750] CloseHandle (hObject=0xa4) returned 1 [0165.753] CloseHandle (hObject=0xa8) returned 1 [0165.754] CloseHandle (hObject=0xa8) returned 1 [0165.755] CloseHandle (hObject=0xa8) returned 1 [0165.756] CloseHandle (hObject=0xac) returned 1 [0165.756] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0165.758] CloseHandle (hObject=0xac) returned 1 [0165.768] CloseHandle (hObject=0xac) returned 1 [0165.770] CloseHandle (hObject=0xac) returned 1 [0165.771] CloseHandle (hObject=0xb0) returned 1 [0165.772] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019011820190119\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012019011820190119\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019011820190119\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012019011820190119\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0165.774] CloseHandle (hObject=0xa8) returned 1 [0165.776] CloseHandle (hObject=0xa8) returned 1 [0165.787] CloseHandle (hObject=0xa8) returned 1 [0165.807] CloseHandle (hObject=0xac) returned 1 [0165.811] CloseHandle (hObject=0xac) returned 1 [0165.812] CloseHandle (hObject=0xac) returned 1 [0165.814] CloseHandle (hObject=0xb0) returned 1 [0165.814] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0165.816] CloseHandle (hObject=0xa4) returned 1 [0165.820] CloseHandle (hObject=0xa4) returned 1 [0165.822] CloseHandle (hObject=0xa4) returned 1 [0165.823] CloseHandle (hObject=0xa8) returned 1 [0165.823] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0165.827] CloseHandle (hObject=0xa8) returned 1 [0165.831] CloseHandle (hObject=0xa8) returned 1 [0165.833] CloseHandle (hObject=0xa8) returned 1 [0165.833] CloseHandle (hObject=0xac) returned 1 [0165.833] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\low\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\low\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0165.836] CloseHandle (hObject=0xa4) returned 1 [0165.839] CloseHandle (hObject=0xa4) returned 1 [0165.841] CloseHandle (hObject=0xa4) returned 1 [0165.841] CloseHandle (hObject=0xa8) returned 1 [0165.842] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0165.844] CloseHandle (hObject=0xa8) returned 1 [0165.856] CloseHandle (hObject=0xa8) returned 1 [0165.858] CloseHandle (hObject=0xa8) returned 1 [0165.859] CloseHandle (hObject=0xac) returned 1 [0165.859] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\low\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\low\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0165.861] CloseHandle (hObject=0xa4) returned 1 [0165.864] CloseHandle (hObject=0xa4) returned 1 [0165.865] CloseHandle (hObject=0xa4) returned 1 [0165.867] CloseHandle (hObject=0xa8) returned 1 [0165.867] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iedownloadhistory\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iedownloadhistory\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0165.872] CloseHandle (hObject=0xa4) returned 1 [0165.873] CloseHandle (hObject=0xa4) returned 1 [0165.874] CloseHandle (hObject=0xa4) returned 1 [0165.876] CloseHandle (hObject=0xa8) returned 1 [0165.878] CloseHandle (hObject=0xa8) returned 1 [0165.880] CloseHandle (hObject=0xa8) returned 1 [0165.881] CloseHandle (hObject=0xa8) returned 1 [0165.884] CloseHandle (hObject=0xa8) returned 1 [0165.885] CloseHandle (hObject=0xa8) returned 1 [0165.887] CloseHandle (hObject=0xac) returned 1 [0165.888] CloseHandle (hObject=0xac) returned 1 [0165.890] CloseHandle (hObject=0xac) returned 1 [0165.892] CloseHandle (hObject=0xa8) returned 1 [0165.893] CloseHandle (hObject=0xa8) returned 1 [0165.905] CloseHandle (hObject=0xa8) returned 1 [0165.907] CloseHandle (hObject=0xa8) returned 1 [0165.907] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat.cryptoid"), dwFlags=0x2) returned 0 [0165.907] GetLastError () returned 0x20 [0165.907] GetLastError () returned 0x20 [0165.907] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0165.907] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0165.907] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0165.908] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0165.908] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0165.908] GetFileType (hFile=0xa8) returned 0x1 [0165.909] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0165.909] CloseHandle (hObject=0xa8) returned 1 [0165.909] AreFileApisANSI () returned 1 [0165.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498228, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0165.909] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0165.910] GetFileType (hFile=0xa8) returned 0x1 [0165.910] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0165.911] CloseHandle (hObject=0xa8) returned 1 [0165.911] AreFileApisANSI () returned 1 [0165.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0165.911] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0165.912] GetFileType (hFile=0xa8) returned 0x1 [0165.912] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0165.913] CloseHandle (hObject=0xa8) returned 1 [0165.913] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\*", lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0x494ba0 [0165.913] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0165.913] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0165.913] AreFileApisANSI () returned 1 [0165.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0165.913] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0b8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0165.914] GetFileType (hFile=0xac) returned 0x1 [0165.914] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da168 | out: lpNewFilePointer=0x0) returned 1 [0165.914] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da11c | out: lpNewFilePointer=0x0) returned 1 [0165.914] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da14c | out: lpNewFilePointer=0x0) returned 1 [0165.914] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.914] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.914] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da14c | out: lpNewFilePointer=0x0) returned 1 [0165.914] CloseHandle (hObject=0xac) returned 1 [0165.914] AreFileApisANSI () returned 1 [0165.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0165.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0165.915] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0165.915] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0165.915] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0165.915] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0165.915] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0 [0165.915] FindClose (in: hFindFile=0x494ba0 | out: hFindFile=0x494ba0) returned 1 [0165.916] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0165.916] AreFileApisANSI () returned 1 [0165.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0165.916] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0165.918] GetFileType (hFile=0xa8) returned 0x1 [0165.918] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0165.919] CloseHandle (hObject=0xa8) returned 1 [0165.919] AreFileApisANSI () returned 1 [0165.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4984a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0165.920] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0165.920] GetFileType (hFile=0xa8) returned 0x1 [0165.920] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0165.921] CloseHandle (hObject=0xa8) returned 1 [0165.921] AreFileApisANSI () returned 1 [0165.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0165.921] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0165.922] GetFileType (hFile=0xa8) returned 0x1 [0165.922] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0165.922] CloseHandle (hObject=0xa8) returned 1 [0165.932] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\*", lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0x494a60 [0165.932] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0165.932] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0165.932] AreFileApisANSI () returned 1 [0165.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0165.932] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\Content.IE5\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\content.ie5\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0165.933] GetFileType (hFile=0xac) returned 0x1 [0165.933] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0165.934] CloseHandle (hObject=0xac) returned 1 [0165.934] AreFileApisANSI () returned 1 [0165.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0165.934] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\Content.IE5\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\content.ie5\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0165.936] GetFileType (hFile=0xac) returned 0x1 [0165.936] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0165.937] CloseHandle (hObject=0xac) returned 1 [0165.938] AreFileApisANSI () returned 1 [0165.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0165.938] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\Content.IE5\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\content.ie5\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0165.947] GetFileType (hFile=0xac) returned 0x1 [0165.947] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0165.948] CloseHandle (hObject=0xac) returned 1 [0165.948] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\Content.IE5\\*", lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0xffffffff [0165.948] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0165.948] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0165.948] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0165.948] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0165.948] AreFileApisANSI () returned 1 [0165.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0165.948] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\ie\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0165.949] GetFileType (hFile=0xac) returned 0x1 [0165.949] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0165.950] CloseHandle (hObject=0xac) returned 1 [0165.950] AreFileApisANSI () returned 1 [0165.950] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0165.950] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\ie\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0165.952] GetFileType (hFile=0xac) returned 0x1 [0165.952] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0165.953] CloseHandle (hObject=0xac) returned 1 [0165.954] AreFileApisANSI () returned 1 [0165.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0165.954] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\ie\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0165.954] GetFileType (hFile=0xac) returned 0x1 [0165.954] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0165.955] CloseHandle (hObject=0xac) returned 1 [0165.956] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\*", lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0x4948a0 [0165.956] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0165.956] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0165.956] AreFileApisANSI () returned 1 [0165.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0165.956] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\ie\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9758, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0165.956] GetFileType (hFile=0xb0) returned 0x1 [0165.956] SetFilePointerEx (in: hFile=0xb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d9808 | out: lpNewFilePointer=0x0) returned 1 [0165.957] SetFilePointerEx (in: hFile=0xb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d97bc | out: lpNewFilePointer=0x0) returned 1 [0165.957] SetFilePointerEx (in: hFile=0xb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d97ec | out: lpNewFilePointer=0x0) returned 1 [0165.957] SetFilePointerEx (in: hFile=0xb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d97e0 | out: lpNewFilePointer=0x0) returned 1 [0165.957] SetFilePointerEx (in: hFile=0xb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d97a4 | out: lpNewFilePointer=0x0) returned 1 [0165.957] SetFilePointerEx (in: hFile=0xb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d97ec | out: lpNewFilePointer=0x0) returned 1 [0165.957] CloseHandle (hObject=0xb0) returned 1 [0165.957] AreFileApisANSI () returned 1 [0165.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0165.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0165.957] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\ie\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\ie\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0165.958] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0165.958] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0165.958] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0165.958] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0 [0165.958] FindClose (in: hFindFile=0x4948a0 | out: hFindFile=0x4948a0) returned 1 [0165.959] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0165.959] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0165.959] AreFileApisANSI () returned 1 [0165.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0165.959] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\smartscreencache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0b8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0165.960] GetFileType (hFile=0xac) returned 0x1 [0165.960] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da168 | out: lpNewFilePointer=0x0) returned 1 [0165.960] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da11c | out: lpNewFilePointer=0x0) returned 1 [0165.960] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da14c | out: lpNewFilePointer=0x0) returned 1 [0165.960] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.961] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.961] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da14c | out: lpNewFilePointer=0x0) returned 1 [0165.961] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.961] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.961] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.974] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.974] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.974] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.974] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.975] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.975] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.975] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.975] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.976] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.976] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0165.976] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0165.976] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.984] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.984] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.984] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.984] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.984] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.984] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.985] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.985] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0165.985] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0165.985] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.985] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.985] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.985] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.985] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.985] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.985] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0165.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0165.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.986] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.986] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.987] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0165.987] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0165.987] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.987] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.987] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.987] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.987] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.987] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.987] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.987] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.987] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0165.988] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0165.988] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.988] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.988] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.988] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.988] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.988] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.988] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.988] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.988] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0165.988] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0165.989] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.989] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.989] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.989] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.989] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.989] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.989] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.989] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.989] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0165.989] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0165.989] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.990] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.990] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.990] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.990] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.990] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.990] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.990] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.990] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0165.990] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0165.990] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.990] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.991] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.991] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.991] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.991] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.991] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.991] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.991] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0165.991] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0165.991] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.991] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.991] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.992] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.992] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.992] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.992] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.992] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.992] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0165.992] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0165.992] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.993] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.993] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.993] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.993] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.993] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.993] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.993] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.993] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0165.993] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0165.993] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.993] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.994] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.994] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.994] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.994] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.994] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.994] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.994] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0165.994] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0165.994] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.994] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.994] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.995] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.995] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.995] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.995] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.995] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.995] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0165.995] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0165.995] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.995] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.995] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.995] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.996] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.996] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.996] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.996] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.996] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0165.996] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0165.996] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.996] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.996] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.996] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.996] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.996] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.997] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.997] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.997] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0165.997] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0165.997] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.997] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.997] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.997] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.997] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.997] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.997] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.998] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.998] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0165.998] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0165.998] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.998] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.998] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.998] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.998] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.998] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.998] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.998] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.999] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0165.999] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0165.999] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0165.999] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0165.999] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0165.999] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0165.999] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0165.999] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0165.999] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0165.999] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0165.999] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0166.000] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0166.000] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0166.000] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0166.000] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0166.000] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0166.000] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0166.000] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0166.000] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0166.000] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0166.000] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0166.000] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0166.001] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0166.001] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0166.001] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0166.001] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0166.001] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0166.001] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0166.001] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0166.001] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0166.001] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0166.001] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0166.001] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0166.002] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0166.002] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0166.002] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0166.002] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0166.002] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0166.002] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0166.002] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0166.002] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0166.002] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0166.002] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0166.002] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0166.003] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0166.003] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0166.003] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0166.003] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0166.003] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0166.003] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0166.003] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0166.003] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0166.003] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0166.003] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0166.003] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0166.004] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0166.004] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0166.004] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0166.004] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0166.004] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0166.004] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0166.004] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0166.004] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0166.004] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0166.004] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0166.004] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0166.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0166.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0166.005] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0166.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0166.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0166.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0166.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0166.005] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0166.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0166.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0166.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0166.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0166.006] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0166.006] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0166.006] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0166.006] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0166.006] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0166.006] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0166.006] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0166.006] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0166.006] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0166.006] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0166.006] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0166.007] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0166.007] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0166.007] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0166.007] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0166.007] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0166.007] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0166.007] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0166.007] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0166.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0166.008] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0166.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0166.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0166.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0166.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0166.008] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0166.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0166.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0166.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0166.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0166.009] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0166.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0166.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0166.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0166.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0166.009] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0166.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0166.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0166.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0166.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0166.009] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0166.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0166.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0166.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0166.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0166.010] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0166.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0166.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0166.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0166.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0166.010] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0166.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0166.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0166.011] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0166.185] CloseHandle (hObject=0xac) returned 1 [0166.188] AreFileApisANSI () returned 1 [0166.188] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0166.188] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0166.188] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\smartscreencache.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\smartscreencache.dat.cryptoid"), dwFlags=0x2) returned 1 [0166.189] AreFileApisANSI () returned 1 [0166.189] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0166.908] CloseHandle (hObject=0xac) returned 1 [0166.908] AreFileApisANSI () returned 1 [0166.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0166.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0166.908] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat.cryptoid"), dwFlags=0x2) returned 1 [0166.909] AreFileApisANSI () returned 1 [0166.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498828, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0166.911] CloseHandle (hObject=0xa8) returned 1 [0166.911] AreFileApisANSI () returned 1 [0166.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498b28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0166.913] CloseHandle (hObject=0xa8) returned 1 [0166.913] AreFileApisANSI () returned 1 [0166.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4989a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0166.916] CloseHandle (hObject=0xa8) returned 1 [0166.916] AreFileApisANSI () returned 1 [0166.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498428, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0166.919] CloseHandle (hObject=0xac) returned 1 [0166.919] AreFileApisANSI () returned 1 [0166.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0166.921] CloseHandle (hObject=0xac) returned 1 [0166.921] AreFileApisANSI () returned 1 [0166.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497d28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0166.927] CloseHandle (hObject=0xac) returned 1 [0166.928] AreFileApisANSI () returned 1 [0166.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0166.929] CloseHandle (hObject=0xb0) returned 1 [0166.929] AreFileApisANSI () returned 1 [0166.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0166.933] CloseHandle (hObject=0xb0) returned 1 [0166.933] AreFileApisANSI () returned 1 [0166.933] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0166.935] CloseHandle (hObject=0xb0) returned 1 [0166.936] AreFileApisANSI () returned 1 [0166.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0166.937] CloseHandle (hObject=0xb4) returned 1 [0166.938] AreFileApisANSI () returned 1 [0166.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0166.946] CloseHandle (hObject=0xb4) returned 1 [0166.946] AreFileApisANSI () returned 1 [0166.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0166.948] CloseHandle (hObject=0xb4) returned 1 [0166.949] AreFileApisANSI () returned 1 [0166.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0166.950] CloseHandle (hObject=0xb8) returned 1 [0166.950] AreFileApisANSI () returned 1 [0166.950] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0166.952] CloseHandle (hObject=0xb8) returned 1 [0166.952] AreFileApisANSI () returned 1 [0166.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0166.974] CloseHandle (hObject=0xb8) returned 1 [0166.975] AreFileApisANSI () returned 1 [0166.975] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4befb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0166.987] CloseHandle (hObject=0xbc) returned 1 [0166.988] AreFileApisANSI () returned 1 [0166.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf2d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0166.989] CloseHandle (hObject=0xbc) returned 1 [0166.990] AreFileApisANSI () returned 1 [0166.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf2d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0166.993] CloseHandle (hObject=0xbc) returned 1 [0166.993] AreFileApisANSI () returned 1 [0166.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf140, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0166.995] CloseHandle (hObject=0xc0) returned 1 [0166.995] AreFileApisANSI () returned 1 [0166.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0167.007] CloseHandle (hObject=0xc0) returned 1 [0167.007] AreFileApisANSI () returned 1 [0167.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4beee8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0167.009] CloseHandle (hObject=0xc0) returned 1 [0167.010] AreFileApisANSI () returned 1 [0167.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0167.011] CloseHandle (hObject=0xc4) returned 1 [0167.012] AreFileApisANSI () returned 1 [0167.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0167.015] CloseHandle (hObject=0xc4) returned 1 [0167.015] AreFileApisANSI () returned 1 [0167.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ea20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0167.016] CloseHandle (hObject=0xc4) returned 1 [0167.017] AreFileApisANSI () returned 1 [0167.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0167.019] CloseHandle (hObject=0xc8) returned 1 [0167.020] AreFileApisANSI () returned 1 [0167.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 158 [0167.021] CloseHandle (hObject=0xc8) returned 1 [0167.022] AreFileApisANSI () returned 1 [0167.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0167.024] CloseHandle (hObject=0xc8) returned 1 [0167.025] AreFileApisANSI () returned 1 [0167.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eda0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 163 [0167.026] CloseHandle (hObject=0xc8) returned 1 [0167.026] AreFileApisANSI () returned 1 [0167.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eda0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 160 [0167.028] CloseHandle (hObject=0xc8) returned 1 [0167.028] AreFileApisANSI () returned 1 [0167.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e6a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 163 [0167.049] CloseHandle (hObject=0xc8) returned 1 [0167.050] AreFileApisANSI () returned 1 [0167.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4985a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0167.055] CloseHandle (hObject=0xa4) returned 1 [0167.055] AreFileApisANSI () returned 1 [0167.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4980a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0167.056] CloseHandle (hObject=0xa4) returned 1 [0167.057] AreFileApisANSI () returned 1 [0167.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0167.058] CloseHandle (hObject=0xa4) returned 1 [0167.059] AreFileApisANSI () returned 1 [0167.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0167.062] CloseHandle (hObject=0xa8) returned 1 [0167.062] AreFileApisANSI () returned 1 [0167.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0167.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0167.062] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\2xbm2edn.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\2xbm2edn.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.064] AreFileApisANSI () returned 1 [0167.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0167.066] CloseHandle (hObject=0xa8) returned 1 [0167.067] AreFileApisANSI () returned 1 [0167.067] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0167.067] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0167.067] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\8489xh4e.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\8489xh4e.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.068] AreFileApisANSI () returned 1 [0167.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0167.071] CloseHandle (hObject=0xa8) returned 1 [0167.071] AreFileApisANSI () returned 1 [0167.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0167.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0167.071] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b4k109k7.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b4k109k7.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.076] AreFileApisANSI () returned 1 [0167.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0167.078] CloseHandle (hObject=0xa8) returned 1 [0167.078] AreFileApisANSI () returned 1 [0167.078] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0167.078] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0167.079] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b67m68h4.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b67m68h4.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.080] AreFileApisANSI () returned 1 [0167.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0167.080] CloseHandle (hObject=0xa8) returned 1 [0167.081] AreFileApisANSI () returned 1 [0167.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0167.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0167.081] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0167.082] AreFileApisANSI () returned 1 [0167.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0167.083] CloseHandle (hObject=0xa8) returned 1 [0167.084] AreFileApisANSI () returned 1 [0167.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0167.087] CloseHandle (hObject=0xa8) returned 1 [0167.088] AreFileApisANSI () returned 1 [0167.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0167.089] CloseHandle (hObject=0xa8) returned 1 [0167.089] AreFileApisANSI () returned 1 [0167.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0167.090] CloseHandle (hObject=0xac) returned 1 [0167.090] AreFileApisANSI () returned 1 [0167.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0167.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5590, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0167.091] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0167.092] AreFileApisANSI () returned 1 [0167.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0167.093] CloseHandle (hObject=0xac) returned 1 [0167.094] AreFileApisANSI () returned 1 [0167.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0167.095] CloseHandle (hObject=0xac) returned 1 [0167.095] AreFileApisANSI () returned 1 [0167.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0167.111] CloseHandle (hObject=0xac) returned 1 [0167.111] AreFileApisANSI () returned 1 [0167.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4981a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0167.115] CloseHandle (hObject=0xa8) returned 1 [0167.116] AreFileApisANSI () returned 1 [0167.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0167.117] CloseHandle (hObject=0xa8) returned 1 [0167.118] AreFileApisANSI () returned 1 [0167.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498b28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0167.119] CloseHandle (hObject=0xa8) returned 1 [0167.122] AreFileApisANSI () returned 1 [0167.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.124] CloseHandle (hObject=0xac) returned 1 [0167.125] AreFileApisANSI () returned 1 [0167.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.125] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0ghtmu6x.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0ghtmu6x.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.126] AreFileApisANSI () returned 1 [0167.126] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.127] CloseHandle (hObject=0xac) returned 1 [0167.128] AreFileApisANSI () returned 1 [0167.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.128] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0mdkr34w.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0mdkr34w.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.129] AreFileApisANSI () returned 1 [0167.129] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.131] CloseHandle (hObject=0xac) returned 1 [0167.131] AreFileApisANSI () returned 1 [0167.131] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.131] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.131] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0z1jievi.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0z1jievi.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.132] AreFileApisANSI () returned 1 [0167.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.134] CloseHandle (hObject=0xac) returned 1 [0167.134] AreFileApisANSI () returned 1 [0167.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.135] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16doe15m.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16doe15m.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.135] AreFileApisANSI () returned 1 [0167.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.138] CloseHandle (hObject=0xac) returned 1 [0167.138] AreFileApisANSI () returned 1 [0167.138] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.139] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16y0x4v7.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16y0x4v7.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.140] AreFileApisANSI () returned 1 [0167.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.141] CloseHandle (hObject=0xac) returned 1 [0167.141] AreFileApisANSI () returned 1 [0167.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.141] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1l3ku69n.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1l3ku69n.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.142] AreFileApisANSI () returned 1 [0167.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.144] CloseHandle (hObject=0xac) returned 1 [0167.144] AreFileApisANSI () returned 1 [0167.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.144] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lfqzeoh.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lfqzeoh.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.146] AreFileApisANSI () returned 1 [0167.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.148] CloseHandle (hObject=0xac) returned 1 [0167.148] AreFileApisANSI () returned 1 [0167.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.148] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lluy7b7.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lluy7b7.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.150] AreFileApisANSI () returned 1 [0167.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.152] CloseHandle (hObject=0xac) returned 1 [0167.152] AreFileApisANSI () returned 1 [0167.152] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.152] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.152] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1uyn2rfy.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1uyn2rfy.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.154] AreFileApisANSI () returned 1 [0167.154] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.156] CloseHandle (hObject=0xac) returned 1 [0167.156] AreFileApisANSI () returned 1 [0167.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.156] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\23jc2utd.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\23jc2utd.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.157] AreFileApisANSI () returned 1 [0167.157] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.160] CloseHandle (hObject=0xac) returned 1 [0167.160] AreFileApisANSI () returned 1 [0167.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.160] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2eq4e2oj.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2eq4e2oj.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.161] AreFileApisANSI () returned 1 [0167.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.180] CloseHandle (hObject=0xac) returned 1 [0167.181] AreFileApisANSI () returned 1 [0167.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.181] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2hyile1o.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2hyile1o.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.182] AreFileApisANSI () returned 1 [0167.182] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.185] CloseHandle (hObject=0xac) returned 1 [0167.185] AreFileApisANSI () returned 1 [0167.185] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.185] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.185] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3rw4k76x.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3rw4k76x.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.186] AreFileApisANSI () returned 1 [0167.186] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.188] CloseHandle (hObject=0xac) returned 1 [0167.188] AreFileApisANSI () returned 1 [0167.188] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.188] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.189] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3vvsz2co.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3vvsz2co.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.190] AreFileApisANSI () returned 1 [0167.190] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.192] CloseHandle (hObject=0xac) returned 1 [0167.193] AreFileApisANSI () returned 1 [0167.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.193] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4mn240wn.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4mn240wn.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.194] AreFileApisANSI () returned 1 [0167.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.196] CloseHandle (hObject=0xac) returned 1 [0167.196] AreFileApisANSI () returned 1 [0167.197] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.197] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.197] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4o6583i0.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4o6583i0.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.198] AreFileApisANSI () returned 1 [0167.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.200] CloseHandle (hObject=0xac) returned 1 [0167.201] AreFileApisANSI () returned 1 [0167.201] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.201] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.201] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4ywcppxn.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4ywcppxn.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.202] AreFileApisANSI () returned 1 [0167.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.204] CloseHandle (hObject=0xac) returned 1 [0167.205] AreFileApisANSI () returned 1 [0167.205] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.205] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.205] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4z6udyly.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4z6udyly.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.206] AreFileApisANSI () returned 1 [0167.206] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.208] CloseHandle (hObject=0xac) returned 1 [0167.208] AreFileApisANSI () returned 1 [0167.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.209] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5afmrgry.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5afmrgry.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.210] AreFileApisANSI () returned 1 [0167.210] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.223] CloseHandle (hObject=0xac) returned 1 [0167.224] AreFileApisANSI () returned 1 [0167.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.224] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5arqymiv.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5arqymiv.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.225] AreFileApisANSI () returned 1 [0167.225] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.228] CloseHandle (hObject=0xac) returned 1 [0167.228] AreFileApisANSI () returned 1 [0167.228] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.228] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.229] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5av8l20n.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5av8l20n.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.230] AreFileApisANSI () returned 1 [0167.230] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.233] CloseHandle (hObject=0xac) returned 1 [0167.233] AreFileApisANSI () returned 1 [0167.233] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.233] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.233] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5nwxn3ui.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5nwxn3ui.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.235] AreFileApisANSI () returned 1 [0167.235] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.244] CloseHandle (hObject=0xac) returned 1 [0167.244] AreFileApisANSI () returned 1 [0167.244] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.244] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.245] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5stj6nzl.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5stj6nzl.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.246] AreFileApisANSI () returned 1 [0167.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.249] CloseHandle (hObject=0xac) returned 1 [0167.249] AreFileApisANSI () returned 1 [0167.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.250] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5tay54v0.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5tay54v0.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.251] AreFileApisANSI () returned 1 [0167.251] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.254] CloseHandle (hObject=0xac) returned 1 [0167.254] AreFileApisANSI () returned 1 [0167.254] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.254] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.254] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5wqegnki.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5wqegnki.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.256] AreFileApisANSI () returned 1 [0167.256] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.259] CloseHandle (hObject=0xac) returned 1 [0167.259] AreFileApisANSI () returned 1 [0167.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.260] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\66i0ojl8.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\66i0ojl8.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.261] AreFileApisANSI () returned 1 [0167.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.264] CloseHandle (hObject=0xac) returned 1 [0167.265] AreFileApisANSI () returned 1 [0167.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.265] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\80j4ih0y.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\80j4ih0y.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.270] AreFileApisANSI () returned 1 [0167.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.282] CloseHandle (hObject=0xac) returned 1 [0167.283] AreFileApisANSI () returned 1 [0167.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.283] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\8ffcgs26.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\8ffcgs26.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.284] AreFileApisANSI () returned 1 [0167.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.287] CloseHandle (hObject=0xac) returned 1 [0167.287] AreFileApisANSI () returned 1 [0167.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.287] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9abr37nl.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9abr37nl.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.288] AreFileApisANSI () returned 1 [0167.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.291] CloseHandle (hObject=0xac) returned 1 [0167.291] AreFileApisANSI () returned 1 [0167.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.291] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9ijpmfhz.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9ijpmfhz.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.292] AreFileApisANSI () returned 1 [0167.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.295] CloseHandle (hObject=0xac) returned 1 [0167.295] AreFileApisANSI () returned 1 [0167.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.295] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9m7zhw1q.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9m7zhw1q.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.296] AreFileApisANSI () returned 1 [0167.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.300] CloseHandle (hObject=0xac) returned 1 [0167.300] AreFileApisANSI () returned 1 [0167.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.300] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9xacnsyg.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9xacnsyg.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.328] AreFileApisANSI () returned 1 [0167.328] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.330] CloseHandle (hObject=0xac) returned 1 [0167.331] AreFileApisANSI () returned 1 [0167.331] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.331] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.331] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9z1y5ici.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9z1y5ici.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.332] AreFileApisANSI () returned 1 [0167.332] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.334] CloseHandle (hObject=0xac) returned 1 [0167.335] AreFileApisANSI () returned 1 [0167.335] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.335] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.335] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\a0rk8a2h.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\a0rk8a2h.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.336] AreFileApisANSI () returned 1 [0167.336] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.338] CloseHandle (hObject=0xac) returned 1 [0167.339] AreFileApisANSI () returned 1 [0167.339] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.339] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.339] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\aa2ij7ju.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\aa2ij7ju.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.340] AreFileApisANSI () returned 1 [0167.340] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.343] CloseHandle (hObject=0xac) returned 1 [0167.343] AreFileApisANSI () returned 1 [0167.343] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.343] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.343] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\b427tfxj.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\b427tfxj.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.358] AreFileApisANSI () returned 1 [0167.358] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.362] CloseHandle (hObject=0xac) returned 1 [0167.362] AreFileApisANSI () returned 1 [0167.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.363] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\bk4hnaz1.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\bk4hnaz1.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.364] AreFileApisANSI () returned 1 [0167.364] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.368] CloseHandle (hObject=0xac) returned 1 [0167.368] AreFileApisANSI () returned 1 [0167.368] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.368] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.369] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cc7ds78r.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cc7ds78r.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.370] AreFileApisANSI () returned 1 [0167.370] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.372] CloseHandle (hObject=0xac) returned 1 [0167.372] AreFileApisANSI () returned 1 [0167.372] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.372] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.372] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cdgowo27.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cdgowo27.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.375] AreFileApisANSI () returned 1 [0167.375] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0167.375] CloseHandle (hObject=0xac) returned 1 [0167.376] AreFileApisANSI () returned 1 [0167.376] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0167.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0167.377] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0167.378] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0167.378] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0167.378] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0167.378] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0167.379] AreFileApisANSI () returned 1 [0167.379] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.379] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cyhyo8jd.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0b8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0167.379] GetFileType (hFile=0xac) returned 0x1 [0167.379] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da168 | out: lpNewFilePointer=0x0) returned 1 [0167.379] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da11c | out: lpNewFilePointer=0x0) returned 1 [0167.380] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da14c | out: lpNewFilePointer=0x0) returned 1 [0167.380] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.380] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.380] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da14c | out: lpNewFilePointer=0x0) returned 1 [0167.380] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.380] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.380] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x6e, lpOverlapped=0x0) returned 1 [0167.382] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.382] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.382] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.382] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.382] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.382] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.382] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.382] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x66, lpOverlapped=0x0) returned 1 [0167.383] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.383] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.383] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.383] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.383] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.383] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.383] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.383] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.383] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.384] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x5e, lpOverlapped=0x0) returned 1 [0167.384] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.384] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.384] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.384] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.384] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.384] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.384] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.384] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.385] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.385] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x56, lpOverlapped=0x0) returned 1 [0167.385] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.385] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.385] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.385] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.385] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.385] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.385] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.385] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.386] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.386] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x4e, lpOverlapped=0x0) returned 1 [0167.386] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.386] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.386] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.386] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.386] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.386] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.387] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.387] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.387] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.387] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x46, lpOverlapped=0x0) returned 1 [0167.387] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.388] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.388] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.388] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.388] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.388] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.388] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.388] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.388] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.388] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x3e, lpOverlapped=0x0) returned 1 [0167.388] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.389] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.389] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.389] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.389] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.389] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.389] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.389] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.389] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.389] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x36, lpOverlapped=0x0) returned 1 [0167.389] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.389] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.390] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.390] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.390] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.390] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.390] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.390] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.390] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.390] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x2e, lpOverlapped=0x0) returned 1 [0167.390] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.390] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.390] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.390] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.391] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.391] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.391] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.391] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.391] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.391] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x26, lpOverlapped=0x0) returned 1 [0167.391] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.391] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.391] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.391] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.392] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.392] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.392] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.392] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.392] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.392] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1e, lpOverlapped=0x0) returned 1 [0167.392] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.392] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.392] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.392] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.392] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.393] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.393] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.393] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.393] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.393] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x16, lpOverlapped=0x0) returned 1 [0167.393] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.393] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.393] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.393] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.393] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.394] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.394] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.394] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.394] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.394] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0xe, lpOverlapped=0x0) returned 1 [0167.394] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.394] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.394] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.394] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.394] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.394] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.394] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.395] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.395] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.395] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x6, lpOverlapped=0x0) returned 1 [0167.395] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x0, lpOverlapped=0x0) returned 1 [0167.395] CloseHandle (hObject=0xac) returned 1 [0167.400] AreFileApisANSI () returned 1 [0167.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.400] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cyhyo8jd.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cyhyo8jd.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.401] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0167.401] AreFileApisANSI () returned 1 [0167.401] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.401] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\d9qo3khk.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0b8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0167.403] GetFileType (hFile=0xac) returned 0x1 [0167.403] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da168 | out: lpNewFilePointer=0x0) returned 1 [0167.403] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da11c | out: lpNewFilePointer=0x0) returned 1 [0167.403] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da14c | out: lpNewFilePointer=0x0) returned 1 [0167.403] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.403] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.403] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da14c | out: lpNewFilePointer=0x0) returned 1 [0167.404] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.404] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.404] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x108, lpOverlapped=0x0) returned 1 [0167.405] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.405] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.405] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.405] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.405] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.405] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.406] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.406] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x100, lpOverlapped=0x0) returned 1 [0167.406] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.406] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.406] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.406] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.406] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.406] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.406] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.406] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.406] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.407] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0xf8, lpOverlapped=0x0) returned 1 [0167.407] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.407] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.407] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.407] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.407] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.407] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.407] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.407] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.407] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.408] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0xf0, lpOverlapped=0x0) returned 1 [0167.408] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.408] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.408] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.408] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.408] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.408] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.408] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.408] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.408] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.408] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0xe8, lpOverlapped=0x0) returned 1 [0167.409] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.409] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.409] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.409] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.409] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.409] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.409] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.409] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.409] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.409] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0xe0, lpOverlapped=0x0) returned 1 [0167.409] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.409] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.410] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.410] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.410] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.410] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.410] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.410] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.410] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.410] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0xd8, lpOverlapped=0x0) returned 1 [0167.410] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.410] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.410] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.411] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.411] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.411] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.411] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.411] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.411] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.411] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0xd0, lpOverlapped=0x0) returned 1 [0167.411] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.411] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.411] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.412] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.412] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.412] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.412] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.412] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.412] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.412] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0xc8, lpOverlapped=0x0) returned 1 [0167.412] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.412] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.412] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.412] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.413] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.413] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.413] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.413] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.413] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.413] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0xc0, lpOverlapped=0x0) returned 1 [0167.413] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.413] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.413] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.413] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.413] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.414] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.414] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.414] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.414] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.414] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0xb8, lpOverlapped=0x0) returned 1 [0167.414] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.414] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.414] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.414] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.414] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.414] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.415] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.415] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.415] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.415] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0xb0, lpOverlapped=0x0) returned 1 [0167.415] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.415] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.415] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.415] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.415] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.415] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.416] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.416] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.416] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.416] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0xa8, lpOverlapped=0x0) returned 1 [0167.416] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.416] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.416] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.416] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.416] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.416] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.417] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.417] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.417] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.417] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0xa0, lpOverlapped=0x0) returned 1 [0167.417] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.417] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.417] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.417] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.417] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.417] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.417] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.418] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.418] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.418] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x98, lpOverlapped=0x0) returned 1 [0167.418] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.418] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.418] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.418] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.418] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.418] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.418] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.420] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.420] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.420] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x90, lpOverlapped=0x0) returned 1 [0167.420] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.420] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.421] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.421] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.421] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.421] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.421] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.421] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.421] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.421] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x88, lpOverlapped=0x0) returned 1 [0167.421] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.421] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.422] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.422] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.422] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.422] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.422] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.422] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.422] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.422] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x80, lpOverlapped=0x0) returned 1 [0167.422] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.422] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.423] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.423] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.423] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.423] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.423] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.423] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.423] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.423] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x78, lpOverlapped=0x0) returned 1 [0167.423] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.423] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.423] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.424] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.424] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.424] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.424] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.424] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.424] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.424] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x70, lpOverlapped=0x0) returned 1 [0167.424] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.424] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.424] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.425] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.425] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.425] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.425] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.425] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.425] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.425] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x68, lpOverlapped=0x0) returned 1 [0167.425] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.425] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.425] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.426] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.426] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.426] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.426] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.426] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.426] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.426] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x60, lpOverlapped=0x0) returned 1 [0167.426] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.426] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.426] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.427] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.427] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.427] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.427] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.427] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.427] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.427] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x58, lpOverlapped=0x0) returned 1 [0167.427] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.427] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.427] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.428] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.428] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.428] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.428] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.428] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.428] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.428] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x50, lpOverlapped=0x0) returned 1 [0167.428] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.428] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.428] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.428] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.429] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.429] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.429] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.429] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.429] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.429] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x48, lpOverlapped=0x0) returned 1 [0167.429] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.429] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.429] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.429] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.430] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.430] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.430] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.430] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.430] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.430] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x40, lpOverlapped=0x0) returned 1 [0167.430] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.430] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.430] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.431] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.431] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.431] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.431] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.431] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.431] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.431] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x38, lpOverlapped=0x0) returned 1 [0167.431] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.431] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.431] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.431] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.432] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.432] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.432] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.432] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.432] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.432] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x30, lpOverlapped=0x0) returned 1 [0167.432] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.432] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.432] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.432] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.433] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.433] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.433] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.433] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.433] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.433] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x28, lpOverlapped=0x0) returned 1 [0167.433] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.433] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.433] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.433] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.434] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.434] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.434] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.434] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.434] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.434] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x20, lpOverlapped=0x0) returned 1 [0167.435] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.435] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.435] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.435] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0167.435] WriteFile (in: hFile=0xac, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0167.435] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0167.435] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0167.435] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0167.435] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0167.436] ReadFile (in: hFile=0xac, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3da0e4*=0x18, lpOverlapped=0x0) returned 1 [0167.436] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0167.436] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0167.436] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0167.436] CloseHandle (hObject=0xac) returned 1 [0167.440] AreFileApisANSI () returned 1 [0167.440] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.440] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.440] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\d9qo3khk.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\d9qo3khk.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.441] AreFileApisANSI () returned 1 [0167.441] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.457] CloseHandle (hObject=0xac) returned 1 [0167.458] AreFileApisANSI () returned 1 [0167.458] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.458] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.458] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dn8yucva.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dn8yucva.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.460] AreFileApisANSI () returned 1 [0167.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.464] CloseHandle (hObject=0xac) returned 1 [0167.465] AreFileApisANSI () returned 1 [0167.465] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.465] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.465] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dqi7wag8.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dqi7wag8.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.467] AreFileApisANSI () returned 1 [0167.467] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.469] CloseHandle (hObject=0xac) returned 1 [0167.470] AreFileApisANSI () returned 1 [0167.470] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.470] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.470] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\drdf2ezx.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\drdf2ezx.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.471] AreFileApisANSI () returned 1 [0167.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.473] CloseHandle (hObject=0xac) returned 1 [0167.474] AreFileApisANSI () returned 1 [0167.474] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.474] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.474] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e2kpi4zi.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e2kpi4zi.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.476] AreFileApisANSI () returned 1 [0167.476] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.479] CloseHandle (hObject=0xac) returned 1 [0167.479] AreFileApisANSI () returned 1 [0167.479] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.479] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.480] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e978tfrk.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e978tfrk.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.482] AreFileApisANSI () returned 1 [0167.482] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.484] CloseHandle (hObject=0xac) returned 1 [0167.484] AreFileApisANSI () returned 1 [0167.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.484] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\f68mfamn.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\f68mfamn.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.486] AreFileApisANSI () returned 1 [0167.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.488] CloseHandle (hObject=0xac) returned 1 [0167.489] AreFileApisANSI () returned 1 [0167.489] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.489] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.489] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fcgxhift.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fcgxhift.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.490] AreFileApisANSI () returned 1 [0167.490] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.493] CloseHandle (hObject=0xac) returned 1 [0167.493] AreFileApisANSI () returned 1 [0167.493] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.493] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.493] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fgttes1v.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fgttes1v.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.495] AreFileApisANSI () returned 1 [0167.495] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.498] CloseHandle (hObject=0xac) returned 1 [0167.499] AreFileApisANSI () returned 1 [0167.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.499] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fltmvy1f.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fltmvy1f.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.501] AreFileApisANSI () returned 1 [0167.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.504] CloseHandle (hObject=0xac) returned 1 [0167.505] AreFileApisANSI () returned 1 [0167.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.505] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\folsaqt6.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\folsaqt6.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.508] AreFileApisANSI () returned 1 [0167.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.511] CloseHandle (hObject=0xac) returned 1 [0167.512] AreFileApisANSI () returned 1 [0167.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.512] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\gxb342ys.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\gxb342ys.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.515] AreFileApisANSI () returned 1 [0167.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.521] CloseHandle (hObject=0xac) returned 1 [0167.522] AreFileApisANSI () returned 1 [0167.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.522] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\h5lcjx1b.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\h5lcjx1b.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.545] AreFileApisANSI () returned 1 [0167.545] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.549] CloseHandle (hObject=0xac) returned 1 [0167.550] AreFileApisANSI () returned 1 [0167.550] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.550] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.550] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hbpp9xxy.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hbpp9xxy.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.554] AreFileApisANSI () returned 1 [0167.554] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.556] CloseHandle (hObject=0xac) returned 1 [0167.557] AreFileApisANSI () returned 1 [0167.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.557] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hf8f6lu0.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hf8f6lu0.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.559] AreFileApisANSI () returned 1 [0167.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.561] CloseHandle (hObject=0xac) returned 1 [0167.561] AreFileApisANSI () returned 1 [0167.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.561] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\htvl5wiw.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\htvl5wiw.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.563] AreFileApisANSI () returned 1 [0167.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.565] CloseHandle (hObject=0xac) returned 1 [0167.566] AreFileApisANSI () returned 1 [0167.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.566] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ilf13hlb.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ilf13hlb.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.568] AreFileApisANSI () returned 1 [0167.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.570] CloseHandle (hObject=0xac) returned 1 [0167.571] AreFileApisANSI () returned 1 [0167.571] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.571] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.571] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\istfxhhr.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\istfxhhr.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.572] AreFileApisANSI () returned 1 [0167.572] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.575] CloseHandle (hObject=0xac) returned 1 [0167.575] AreFileApisANSI () returned 1 [0167.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.576] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\itd4ouar.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\itd4ouar.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.577] AreFileApisANSI () returned 1 [0167.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.581] CloseHandle (hObject=0xac) returned 1 [0167.582] AreFileApisANSI () returned 1 [0167.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.582] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\j4jsqg9r.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\j4jsqg9r.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.586] AreFileApisANSI () returned 1 [0167.586] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.591] CloseHandle (hObject=0xac) returned 1 [0167.591] AreFileApisANSI () returned 1 [0167.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.592] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jqocykoh.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jqocykoh.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.593] AreFileApisANSI () returned 1 [0167.593] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.595] CloseHandle (hObject=0xac) returned 1 [0167.596] AreFileApisANSI () returned 1 [0167.596] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.596] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.596] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jwfwlayr.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jwfwlayr.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.779] AreFileApisANSI () returned 1 [0167.782] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.849] CloseHandle (hObject=0xac) returned 1 [0167.849] AreFileApisANSI () returned 1 [0167.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.850] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\k8249y1g.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\k8249y1g.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.851] AreFileApisANSI () returned 1 [0167.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.853] CloseHandle (hObject=0xac) returned 1 [0167.854] AreFileApisANSI () returned 1 [0167.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.854] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\knj4ajdh.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\knj4ajdh.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.855] AreFileApisANSI () returned 1 [0167.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.858] CloseHandle (hObject=0xac) returned 1 [0167.859] AreFileApisANSI () returned 1 [0167.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.859] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\l78ew25d.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\l78ew25d.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.861] AreFileApisANSI () returned 1 [0167.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.864] CloseHandle (hObject=0xac) returned 1 [0167.864] AreFileApisANSI () returned 1 [0167.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.864] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lc10xewl.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lc10xewl.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.866] AreFileApisANSI () returned 1 [0167.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.868] CloseHandle (hObject=0xac) returned 1 [0167.868] AreFileApisANSI () returned 1 [0167.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.869] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lvaru12y.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lvaru12y.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.870] AreFileApisANSI () returned 1 [0167.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.872] CloseHandle (hObject=0xac) returned 1 [0167.873] AreFileApisANSI () returned 1 [0167.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.873] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly1nfekn.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly1nfekn.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.875] AreFileApisANSI () returned 1 [0167.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.877] CloseHandle (hObject=0xac) returned 1 [0167.878] AreFileApisANSI () returned 1 [0167.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.878] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly3fdu65.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly3fdu65.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.879] AreFileApisANSI () returned 1 [0167.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.882] CloseHandle (hObject=0xac) returned 1 [0167.883] AreFileApisANSI () returned 1 [0167.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.883] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\m19117wz.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\m19117wz.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.884] AreFileApisANSI () returned 1 [0167.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.887] CloseHandle (hObject=0xac) returned 1 [0167.888] AreFileApisANSI () returned 1 [0167.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.888] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ma5wdfbr.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ma5wdfbr.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.889] AreFileApisANSI () returned 1 [0167.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.893] CloseHandle (hObject=0xac) returned 1 [0167.893] AreFileApisANSI () returned 1 [0167.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.893] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mbjx4mya.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mbjx4mya.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.895] AreFileApisANSI () returned 1 [0167.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.897] CloseHandle (hObject=0xac) returned 1 [0167.898] AreFileApisANSI () returned 1 [0167.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.898] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mcake788.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mcake788.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.899] AreFileApisANSI () returned 1 [0167.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.902] CloseHandle (hObject=0xac) returned 1 [0167.902] AreFileApisANSI () returned 1 [0167.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.902] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mil4mu1s.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mil4mu1s.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.904] AreFileApisANSI () returned 1 [0167.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.907] CloseHandle (hObject=0xac) returned 1 [0167.907] AreFileApisANSI () returned 1 [0167.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.907] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mm8kb9u2.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mm8kb9u2.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.909] AreFileApisANSI () returned 1 [0167.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.912] CloseHandle (hObject=0xac) returned 1 [0167.912] AreFileApisANSI () returned 1 [0167.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.913] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mmpf10f4.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mmpf10f4.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.914] AreFileApisANSI () returned 1 [0167.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.916] CloseHandle (hObject=0xac) returned 1 [0167.917] AreFileApisANSI () returned 1 [0167.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.917] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\moe7dcqu.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\moe7dcqu.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.919] AreFileApisANSI () returned 1 [0167.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.922] CloseHandle (hObject=0xac) returned 1 [0167.922] AreFileApisANSI () returned 1 [0167.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.923] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nehe4kdb.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nehe4kdb.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.924] AreFileApisANSI () returned 1 [0167.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.928] CloseHandle (hObject=0xac) returned 1 [0167.928] AreFileApisANSI () returned 1 [0167.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.929] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nocahpz6.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nocahpz6.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.930] AreFileApisANSI () returned 1 [0167.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.940] CloseHandle (hObject=0xac) returned 1 [0167.941] AreFileApisANSI () returned 1 [0167.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.941] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nyccg1av.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nyccg1av.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.944] AreFileApisANSI () returned 1 [0167.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.946] CloseHandle (hObject=0xac) returned 1 [0167.946] AreFileApisANSI () returned 1 [0167.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.947] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\o8fffi2k.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\o8fffi2k.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.948] AreFileApisANSI () returned 1 [0167.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.951] CloseHandle (hObject=0xac) returned 1 [0167.951] AreFileApisANSI () returned 1 [0167.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.951] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\p778smc9.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\p778smc9.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.953] AreFileApisANSI () returned 1 [0167.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.956] CloseHandle (hObject=0xac) returned 1 [0167.957] AreFileApisANSI () returned 1 [0167.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.958] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pf9hbafq.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pf9hbafq.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.959] AreFileApisANSI () returned 1 [0167.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.962] CloseHandle (hObject=0xac) returned 1 [0167.963] AreFileApisANSI () returned 1 [0167.963] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.963] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.963] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pk3i34uv.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pk3i34uv.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.965] AreFileApisANSI () returned 1 [0167.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.967] CloseHandle (hObject=0xac) returned 1 [0167.967] AreFileApisANSI () returned 1 [0167.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.967] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\qumck8l4.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\qumck8l4.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.969] AreFileApisANSI () returned 1 [0167.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.972] CloseHandle (hObject=0xac) returned 1 [0167.973] AreFileApisANSI () returned 1 [0167.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.973] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rayrhe6z.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rayrhe6z.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.974] AreFileApisANSI () returned 1 [0167.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.985] CloseHandle (hObject=0xac) returned 1 [0167.986] AreFileApisANSI () returned 1 [0167.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.986] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rqk5qf4l.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rqk5qf4l.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.987] AreFileApisANSI () returned 1 [0167.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.990] CloseHandle (hObject=0xac) returned 1 [0167.990] AreFileApisANSI () returned 1 [0167.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.991] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rtepn67m.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rtepn67m.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.992] AreFileApisANSI () returned 1 [0167.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.994] CloseHandle (hObject=0xac) returned 1 [0167.995] AreFileApisANSI () returned 1 [0167.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.995] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ryk7x1k4.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ryk7x1k4.txt.cryptoid"), dwFlags=0x2) returned 1 [0167.996] AreFileApisANSI () returned 1 [0167.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.999] CloseHandle (hObject=0xac) returned 1 [0167.999] AreFileApisANSI () returned 1 [0167.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0167.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0167.999] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\s0ek69p5.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\s0ek69p5.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.002] AreFileApisANSI () returned 1 [0168.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.005] CloseHandle (hObject=0xac) returned 1 [0168.006] AreFileApisANSI () returned 1 [0168.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.006] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\sevcujm3.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\sevcujm3.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.007] AreFileApisANSI () returned 1 [0168.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.010] CloseHandle (hObject=0xac) returned 1 [0168.011] AreFileApisANSI () returned 1 [0168.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.011] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\stgoz493.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\stgoz493.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.012] AreFileApisANSI () returned 1 [0168.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.014] CloseHandle (hObject=0xac) returned 1 [0168.015] AreFileApisANSI () returned 1 [0168.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.015] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\t1lcppsa.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\t1lcppsa.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.016] AreFileApisANSI () returned 1 [0168.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.018] CloseHandle (hObject=0xac) returned 1 [0168.019] AreFileApisANSI () returned 1 [0168.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.019] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tcxqpy9l.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tcxqpy9l.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.021] AreFileApisANSI () returned 1 [0168.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.023] CloseHandle (hObject=0xac) returned 1 [0168.023] AreFileApisANSI () returned 1 [0168.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.024] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tew946ci.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tew946ci.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.025] AreFileApisANSI () returned 1 [0168.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.028] CloseHandle (hObject=0xac) returned 1 [0168.028] AreFileApisANSI () returned 1 [0168.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.028] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tfcjhlei.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tfcjhlei.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.030] AreFileApisANSI () returned 1 [0168.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.032] CloseHandle (hObject=0xac) returned 1 [0168.032] AreFileApisANSI () returned 1 [0168.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.033] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u2oyis47.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u2oyis47.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.034] AreFileApisANSI () returned 1 [0168.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.037] CloseHandle (hObject=0xac) returned 1 [0168.037] AreFileApisANSI () returned 1 [0168.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.037] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u8fcpakj.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u8fcpakj.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.039] AreFileApisANSI () returned 1 [0168.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.042] CloseHandle (hObject=0xac) returned 1 [0168.042] AreFileApisANSI () returned 1 [0168.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.042] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubupnozc.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubupnozc.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.044] AreFileApisANSI () returned 1 [0168.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.046] CloseHandle (hObject=0xac) returned 1 [0168.046] AreFileApisANSI () returned 1 [0168.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.046] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubxqg39x.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubxqg39x.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.048] AreFileApisANSI () returned 1 [0168.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.051] CloseHandle (hObject=0xac) returned 1 [0168.051] AreFileApisANSI () returned 1 [0168.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.052] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ugl14qs0.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ugl14qs0.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.069] AreFileApisANSI () returned 1 [0168.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.071] CloseHandle (hObject=0xac) returned 1 [0168.072] AreFileApisANSI () returned 1 [0168.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.072] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\uuevxdwp.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\uuevxdwp.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.073] AreFileApisANSI () returned 1 [0168.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.075] CloseHandle (hObject=0xac) returned 1 [0168.076] AreFileApisANSI () returned 1 [0168.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.076] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\v7nncjho.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\v7nncjho.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.077] AreFileApisANSI () returned 1 [0168.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.079] CloseHandle (hObject=0xac) returned 1 [0168.079] AreFileApisANSI () returned 1 [0168.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.080] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\vd3gm2da.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\vd3gm2da.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.081] AreFileApisANSI () returned 1 [0168.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.084] CloseHandle (hObject=0xac) returned 1 [0168.085] AreFileApisANSI () returned 1 [0168.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.085] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wpexktdv.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wpexktdv.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.086] AreFileApisANSI () returned 1 [0168.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.089] CloseHandle (hObject=0xac) returned 1 [0168.090] AreFileApisANSI () returned 1 [0168.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.090] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wut8m1q8.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wut8m1q8.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.091] AreFileApisANSI () returned 1 [0168.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.094] CloseHandle (hObject=0xac) returned 1 [0168.094] AreFileApisANSI () returned 1 [0168.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.094] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wx75teor.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wx75teor.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.095] AreFileApisANSI () returned 1 [0168.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.098] CloseHandle (hObject=0xac) returned 1 [0168.098] AreFileApisANSI () returned 1 [0168.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.098] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xrs5d0n2.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xrs5d0n2.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.099] AreFileApisANSI () returned 1 [0168.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.102] CloseHandle (hObject=0xac) returned 1 [0168.102] AreFileApisANSI () returned 1 [0168.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.102] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xuauk5r0.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xuauk5r0.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.103] AreFileApisANSI () returned 1 [0168.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.105] CloseHandle (hObject=0xac) returned 1 [0168.105] AreFileApisANSI () returned 1 [0168.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.106] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y1i415ys.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y1i415ys.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.107] AreFileApisANSI () returned 1 [0168.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.108] CloseHandle (hObject=0xac) returned 1 [0168.109] AreFileApisANSI () returned 1 [0168.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0168.109] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y3xu5okr.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y3xu5okr.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.110] AreFileApisANSI () returned 1 [0168.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0168.111] CloseHandle (hObject=0xa8) returned 1 [0168.112] AreFileApisANSI () returned 1 [0168.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0168.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.112] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\oouvzszn.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\oouvzszn.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.113] AreFileApisANSI () returned 1 [0168.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0168.115] CloseHandle (hObject=0xa8) returned 1 [0168.115] AreFileApisANSI () returned 1 [0168.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4986a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0168.117] CloseHandle (hObject=0xa8) returned 1 [0168.117] AreFileApisANSI () returned 1 [0168.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4985a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0168.120] CloseHandle (hObject=0xa8) returned 1 [0168.120] AreFileApisANSI () returned 1 [0168.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0168.122] CloseHandle (hObject=0xac) returned 1 [0168.122] AreFileApisANSI () returned 1 [0168.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.123] CloseHandle (hObject=0xac) returned 1 [0168.124] AreFileApisANSI () returned 1 [0168.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0168.126] CloseHandle (hObject=0xac) returned 1 [0168.127] AreFileApisANSI () returned 1 [0168.127] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0168.129] CloseHandle (hObject=0xa8) returned 1 [0168.130] AreFileApisANSI () returned 1 [0168.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0168.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.130] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\tigzfglm.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\tigzfglm.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.131] AreFileApisANSI () returned 1 [0168.131] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0168.133] CloseHandle (hObject=0xa8) returned 1 [0168.133] AreFileApisANSI () returned 1 [0168.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0168.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.133] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\xnw1g0sm.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\xnw1g0sm.txt.cryptoid"), dwFlags=0x2) returned 1 [0168.134] AreFileApisANSI () returned 1 [0168.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4987a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0168.135] CloseHandle (hObject=0xa4) returned 1 [0168.136] AreFileApisANSI () returned 1 [0168.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4984a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0168.138] CloseHandle (hObject=0xa4) returned 1 [0168.139] AreFileApisANSI () returned 1 [0168.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4981a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0168.140] CloseHandle (hObject=0xa4) returned 1 [0168.141] AreFileApisANSI () returned 1 [0168.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0168.141] AreFileApisANSI () returned 1 [0168.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0168.143] CloseHandle (hObject=0xa8) returned 1 [0168.144] AreFileApisANSI () returned 1 [0168.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498b28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0168.145] CloseHandle (hObject=0xa8) returned 1 [0168.146] AreFileApisANSI () returned 1 [0168.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0168.147] CloseHandle (hObject=0xa8) returned 1 [0168.147] AreFileApisANSI () returned 1 [0168.147] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.148] CloseHandle (hObject=0xac) returned 1 [0168.148] AreFileApisANSI () returned 1 [0168.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5590, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.148] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\16f3f148.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\16f3f148.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.149] AreFileApisANSI () returned 1 [0168.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.167] CloseHandle (hObject=0xac) returned 1 [0168.168] AreFileApisANSI () returned 1 [0168.168] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.168] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5950, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.168] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.170] AreFileApisANSI () returned 1 [0168.170] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.198] CloseHandle (hObject=0xac) returned 1 [0168.198] AreFileApisANSI () returned 1 [0168.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.199] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ad75057.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ad75057.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.200] AreFileApisANSI () returned 1 [0168.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.223] CloseHandle (hObject=0xac) returned 1 [0168.224] AreFileApisANSI () returned 1 [0168.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.224] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.226] AreFileApisANSI () returned 1 [0168.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.237] CloseHandle (hObject=0xac) returned 1 [0168.238] AreFileApisANSI () returned 1 [0168.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.239] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f43fcc4.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f43fcc4.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.240] AreFileApisANSI () returned 1 [0168.240] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.252] CloseHandle (hObject=0xac) returned 1 [0168.252] AreFileApisANSI () returned 1 [0168.252] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.252] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.252] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\23a8b33e.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\23a8b33e.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.254] AreFileApisANSI () returned 1 [0168.254] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.273] CloseHandle (hObject=0xac) returned 1 [0168.273] AreFileApisANSI () returned 1 [0168.273] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.273] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.274] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\34b2700e.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\34b2700e.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.275] AreFileApisANSI () returned 1 [0168.275] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.299] CloseHandle (hObject=0xac) returned 1 [0168.300] AreFileApisANSI () returned 1 [0168.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5ab8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.308] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\3d12749e.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\3d12749e.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.310] AreFileApisANSI () returned 1 [0168.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.331] CloseHandle (hObject=0xac) returned 1 [0168.333] AreFileApisANSI () returned 1 [0168.333] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.333] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.333] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\434a4949.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\434a4949.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.334] AreFileApisANSI () returned 1 [0168.334] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.362] CloseHandle (hObject=0xac) returned 1 [0168.363] AreFileApisANSI () returned 1 [0168.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.364] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.364] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4929c482.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4929c482.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.365] AreFileApisANSI () returned 1 [0168.365] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.392] CloseHandle (hObject=0xac) returned 1 [0168.392] AreFileApisANSI () returned 1 [0168.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.392] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4a7a41cb.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4a7a41cb.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.394] AreFileApisANSI () returned 1 [0168.394] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.418] CloseHandle (hObject=0xac) returned 1 [0168.419] AreFileApisANSI () returned 1 [0168.419] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.419] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a57e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.419] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\52572b1f.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\52572b1f.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.421] AreFileApisANSI () returned 1 [0168.421] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.438] CloseHandle (hObject=0xac) returned 1 [0168.438] AreFileApisANSI () returned 1 [0168.438] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.438] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5950, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.439] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6b492b11.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6b492b11.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.440] AreFileApisANSI () returned 1 [0168.440] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.465] CloseHandle (hObject=0xac) returned 1 [0168.466] AreFileApisANSI () returned 1 [0168.466] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.466] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.466] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a7d9912.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a7d9912.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.467] AreFileApisANSI () returned 1 [0168.467] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.485] CloseHandle (hObject=0xac) returned 1 [0168.486] AreFileApisANSI () returned 1 [0168.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a57e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.486] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7b9a0c9a.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7b9a0c9a.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.487] AreFileApisANSI () returned 1 [0168.487] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.504] CloseHandle (hObject=0xac) returned 1 [0168.504] AreFileApisANSI () returned 1 [0168.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5680, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.505] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7cbffa6f.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7cbffa6f.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.506] AreFileApisANSI () returned 1 [0168.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.518] CloseHandle (hObject=0xac) returned 1 [0168.518] AreFileApisANSI () returned 1 [0168.519] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.519] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5950, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.519] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7fe97f77.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7fe97f77.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.533] AreFileApisANSI () returned 1 [0168.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.589] CloseHandle (hObject=0xac) returned 1 [0168.590] AreFileApisANSI () returned 1 [0168.590] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.590] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.590] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\9c14e2ad.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\9c14e2ad.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.592] AreFileApisANSI () returned 1 [0168.592] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.615] CloseHandle (hObject=0xac) returned 1 [0168.616] AreFileApisANSI () returned 1 [0168.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.616] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a1444597.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a1444597.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.617] AreFileApisANSI () returned 1 [0168.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.635] CloseHandle (hObject=0xac) returned 1 [0168.636] AreFileApisANSI () returned 1 [0168.636] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.636] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.636] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a229ed41.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a229ed41.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.637] AreFileApisANSI () returned 1 [0168.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.652] CloseHandle (hObject=0xac) returned 1 [0168.653] AreFileApisANSI () returned 1 [0168.653] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.653] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a57e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.653] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a271c2fa.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a271c2fa.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.654] AreFileApisANSI () returned 1 [0168.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.688] CloseHandle (hObject=0xac) returned 1 [0168.689] AreFileApisANSI () returned 1 [0168.689] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.689] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.689] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a2e35824.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a2e35824.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.690] AreFileApisANSI () returned 1 [0168.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.716] CloseHandle (hObject=0xac) returned 1 [0168.717] AreFileApisANSI () returned 1 [0168.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.717] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c00de09f.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c00de09f.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.718] AreFileApisANSI () returned 1 [0168.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.727] CloseHandle (hObject=0xac) returned 1 [0168.728] AreFileApisANSI () returned 1 [0168.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5590, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.728] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c518b947.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c518b947.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c518b947.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c518b947.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.729] AreFileApisANSI () returned 1 [0168.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.748] CloseHandle (hObject=0xac) returned 1 [0168.749] AreFileApisANSI () returned 1 [0168.749] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.749] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5608, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.749] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cc2f5fc7.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cc2f5fc7.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.750] AreFileApisANSI () returned 1 [0168.750] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0168.768] CloseHandle (hObject=0xac) returned 1 [0168.768] AreFileApisANSI () returned 1 [0168.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0168.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0168.768] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cf6a15d.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cf6a15d.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.770] AreFileApisANSI () returned 1 [0168.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.785] CloseHandle (hObject=0xac) returned 1 [0168.785] AreFileApisANSI () returned 1 [0168.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5680, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.785] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\d365e9d1.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\d365e9d1.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\d365e9d1.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\d365e9d1.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.787] AreFileApisANSI () returned 1 [0168.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.799] CloseHandle (hObject=0xac) returned 1 [0168.800] AreFileApisANSI () returned 1 [0168.800] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.800] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.800] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\d83532fe.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\d83532fe.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\d83532fe.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\d83532fe.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.801] AreFileApisANSI () returned 1 [0168.801] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0168.810] CloseHandle (hObject=0xac) returned 1 [0168.811] AreFileApisANSI () returned 1 [0168.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0168.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0168.811] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\da8e59e.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\da8e59e.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.812] AreFileApisANSI () returned 1 [0168.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.840] CloseHandle (hObject=0xac) returned 1 [0168.840] AreFileApisANSI () returned 1 [0168.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.840] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dab752aa.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dab752aa.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.841] AreFileApisANSI () returned 1 [0168.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0168.860] CloseHandle (hObject=0xac) returned 1 [0168.860] AreFileApisANSI () returned 1 [0168.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0168.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5ab8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0168.860] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f466753.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f466753.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.861] AreFileApisANSI () returned 1 [0168.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.886] CloseHandle (hObject=0xac) returned 1 [0168.887] AreFileApisANSI () returned 1 [0168.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.887] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f4b839c7.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f4b839c7.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.888] AreFileApisANSI () returned 1 [0168.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.901] CloseHandle (hObject=0xac) returned 1 [0168.901] AreFileApisANSI () returned 1 [0168.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.901] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f67a62c3.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f67a62c3.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.902] AreFileApisANSI () returned 1 [0168.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.919] CloseHandle (hObject=0xac) returned 1 [0168.920] AreFileApisANSI () returned 1 [0168.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5680, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.920] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f76d6757.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f76d6757.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.921] AreFileApisANSI () returned 1 [0168.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.942] CloseHandle (hObject=0xac) returned 1 [0168.942] AreFileApisANSI () returned 1 [0168.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.942] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f7f275e5.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f7f275e5.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.943] AreFileApisANSI () returned 1 [0168.943] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.963] CloseHandle (hObject=0xac) returned 1 [0168.963] AreFileApisANSI () returned 1 [0168.963] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0168.963] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0168.963] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\fb970b75.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\fb970b75.jpg.cryptoid"), dwFlags=0x2) returned 1 [0168.964] AreFileApisANSI () returned 1 [0168.964] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498828, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0168.966] CloseHandle (hObject=0xa4) returned 1 [0168.966] AreFileApisANSI () returned 1 [0168.966] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4981a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0168.969] CloseHandle (hObject=0xa4) returned 1 [0168.969] AreFileApisANSI () returned 1 [0168.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4988a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0168.970] CloseHandle (hObject=0xa4) returned 1 [0168.971] AreFileApisANSI () returned 1 [0168.971] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0168.987] CloseHandle (hObject=0xa8) returned 1 [0168.987] AreFileApisANSI () returned 1 [0168.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0168.989] CloseHandle (hObject=0xa8) returned 1 [0168.989] AreFileApisANSI () returned 1 [0168.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0168.991] CloseHandle (hObject=0xa8) returned 1 [0168.991] AreFileApisANSI () returned 1 [0168.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0169.012] CloseHandle (hObject=0xa4) returned 1 [0169.012] AreFileApisANSI () returned 1 [0169.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4980a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0169.014] CloseHandle (hObject=0xa4) returned 1 [0169.014] AreFileApisANSI () returned 1 [0169.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0169.015] CloseHandle (hObject=0xa4) returned 1 [0169.017] AreFileApisANSI () returned 1 [0169.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.019] CloseHandle (hObject=0xa8) returned 1 [0169.019] AreFileApisANSI () returned 1 [0169.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4987a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0169.022] CloseHandle (hObject=0xa8) returned 1 [0169.022] AreFileApisANSI () returned 1 [0169.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498428, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.023] CloseHandle (hObject=0xa8) returned 1 [0169.024] AreFileApisANSI () returned 1 [0169.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.026] CloseHandle (hObject=0xa8) returned 1 [0169.026] AreFileApisANSI () returned 1 [0169.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498528, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0169.029] CloseHandle (hObject=0xa8) returned 1 [0169.029] AreFileApisANSI () returned 1 [0169.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497e28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.031] CloseHandle (hObject=0xa8) returned 1 [0169.031] AreFileApisANSI () returned 1 [0169.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4981a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.033] CloseHandle (hObject=0xa8) returned 1 [0169.034] AreFileApisANSI () returned 1 [0169.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4980a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0169.036] CloseHandle (hObject=0xa8) returned 1 [0169.037] AreFileApisANSI () returned 1 [0169.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4980a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.038] CloseHandle (hObject=0xa8) returned 1 [0169.038] AreFileApisANSI () returned 1 [0169.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.040] CloseHandle (hObject=0xa8) returned 1 [0169.041] AreFileApisANSI () returned 1 [0169.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4989a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0169.043] CloseHandle (hObject=0xa8) returned 1 [0169.044] AreFileApisANSI () returned 1 [0169.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.045] CloseHandle (hObject=0xa8) returned 1 [0169.045] AreFileApisANSI () returned 1 [0169.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4983a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0169.047] CloseHandle (hObject=0xa8) returned 1 [0169.048] AreFileApisANSI () returned 1 [0169.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0169.051] CloseHandle (hObject=0xa8) returned 1 [0169.051] AreFileApisANSI () returned 1 [0169.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4989a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0169.052] CloseHandle (hObject=0xa8) returned 1 [0169.053] AreFileApisANSI () returned 1 [0169.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.055] CloseHandle (hObject=0xa8) returned 1 [0169.055] AreFileApisANSI () returned 1 [0169.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498828, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0169.059] CloseHandle (hObject=0xa8) returned 1 [0169.059] AreFileApisANSI () returned 1 [0169.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4986a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.061] CloseHandle (hObject=0xa8) returned 1 [0169.061] AreFileApisANSI () returned 1 [0169.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4980a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.063] CloseHandle (hObject=0xa8) returned 1 [0169.063] AreFileApisANSI () returned 1 [0169.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0169.066] CloseHandle (hObject=0xa8) returned 1 [0169.067] AreFileApisANSI () returned 1 [0169.067] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497e28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.068] CloseHandle (hObject=0xa8) returned 1 [0169.068] AreFileApisANSI () returned 1 [0169.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4982a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.070] CloseHandle (hObject=0xa8) returned 1 [0169.071] AreFileApisANSI () returned 1 [0169.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4987a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0169.084] CloseHandle (hObject=0xa8) returned 1 [0169.084] AreFileApisANSI () returned 1 [0169.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498428, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.086] CloseHandle (hObject=0xa8) returned 1 [0169.086] AreFileApisANSI () returned 1 [0169.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4988a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.098] CloseHandle (hObject=0xa8) returned 1 [0169.098] AreFileApisANSI () returned 1 [0169.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0169.114] CloseHandle (hObject=0xa8) returned 1 [0169.115] AreFileApisANSI () returned 1 [0169.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4986a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.116] CloseHandle (hObject=0xa8) returned 1 [0169.116] AreFileApisANSI () returned 1 [0169.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498b28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.118] CloseHandle (hObject=0xa8) returned 1 [0169.119] AreFileApisANSI () returned 1 [0169.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0169.121] CloseHandle (hObject=0xa8) returned 1 [0169.122] AreFileApisANSI () returned 1 [0169.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497d28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.123] CloseHandle (hObject=0xa8) returned 1 [0169.124] AreFileApisANSI () returned 1 [0169.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498128, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.126] CloseHandle (hObject=0xa8) returned 1 [0169.126] AreFileApisANSI () returned 1 [0169.126] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498428, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0169.129] CloseHandle (hObject=0xa8) returned 1 [0169.130] AreFileApisANSI () returned 1 [0169.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.131] CloseHandle (hObject=0xa8) returned 1 [0169.132] AreFileApisANSI () returned 1 [0169.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498a28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.134] CloseHandle (hObject=0xa8) returned 1 [0169.134] AreFileApisANSI () returned 1 [0169.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0169.139] CloseHandle (hObject=0xa8) returned 1 [0169.139] AreFileApisANSI () returned 1 [0169.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498128, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.140] CloseHandle (hObject=0xa8) returned 1 [0169.141] AreFileApisANSI () returned 1 [0169.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4984a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.143] CloseHandle (hObject=0xa8) returned 1 [0169.143] AreFileApisANSI () returned 1 [0169.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498b28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0169.146] CloseHandle (hObject=0xa8) returned 1 [0169.147] AreFileApisANSI () returned 1 [0169.147] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.148] CloseHandle (hObject=0xa8) returned 1 [0169.149] AreFileApisANSI () returned 1 [0169.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4988a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.150] CloseHandle (hObject=0xa8) returned 1 [0169.150] AreFileApisANSI () returned 1 [0169.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0169.153] CloseHandle (hObject=0xa8) returned 1 [0169.154] AreFileApisANSI () returned 1 [0169.154] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498b28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.155] CloseHandle (hObject=0xa8) returned 1 [0169.155] AreFileApisANSI () returned 1 [0169.155] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.157] CloseHandle (hObject=0xa8) returned 1 [0169.158] AreFileApisANSI () returned 1 [0169.158] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0169.161] CloseHandle (hObject=0xa8) returned 1 [0169.161] AreFileApisANSI () returned 1 [0169.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4981a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0169.162] CloseHandle (hObject=0xa8) returned 1 [0169.163] AreFileApisANSI () returned 1 [0169.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ca8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0169.165] CloseHandle (hObject=0xa8) returned 1 [0169.165] AreFileApisANSI () returned 1 [0169.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4981a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0169.167] CloseHandle (hObject=0xa8) returned 1 [0169.168] AreFileApisANSI () returned 1 [0169.168] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0169.169] CloseHandle (hObject=0xa8) returned 1 [0169.169] AreFileApisANSI () returned 1 [0169.169] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0169.172] CloseHandle (hObject=0xa8) returned 1 [0169.173] AreFileApisANSI () returned 1 [0169.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f200, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 158 [0169.174] CloseHandle (hObject=0xa8) returned 1 [0169.174] AreFileApisANSI () returned 1 [0169.174] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0169.176] CloseHandle (hObject=0xa8) returned 1 [0169.176] AreFileApisANSI () returned 1 [0169.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 172 [0169.178] CloseHandle (hObject=0xac) returned 1 [0169.178] AreFileApisANSI () returned 1 [0169.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0169.182] CloseHandle (hObject=0xac) returned 1 [0169.183] AreFileApisANSI () returned 1 [0169.183] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 172 [0169.184] CloseHandle (hObject=0xac) returned 1 [0169.185] AreFileApisANSI () returned 1 [0169.185] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0169.188] CloseHandle (hObject=0xa8) returned 1 [0169.188] AreFileApisANSI () returned 1 [0169.188] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0169.189] CloseHandle (hObject=0xa8) returned 1 [0169.190] AreFileApisANSI () returned 1 [0169.190] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0169.191] CloseHandle (hObject=0xa8) returned 1 [0169.192] AreFileApisANSI () returned 1 [0169.192] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 162 [0169.193] CloseHandle (hObject=0xac) returned 1 [0169.193] AreFileApisANSI () returned 1 [0169.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f3c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0169.196] CloseHandle (hObject=0xac) returned 1 [0169.196] AreFileApisANSI () returned 1 [0169.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 162 [0169.197] CloseHandle (hObject=0xac) returned 1 [0169.198] AreFileApisANSI () returned 1 [0169.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e6a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0169.200] CloseHandle (hObject=0xa8) returned 1 [0169.201] AreFileApisANSI () returned 1 [0169.201] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f040, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0169.204] CloseHandle (hObject=0xa8) returned 1 [0169.204] AreFileApisANSI () returned 1 [0169.204] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0169.205] CloseHandle (hObject=0xa8) returned 1 [0169.205] AreFileApisANSI () returned 1 [0169.206] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 160 [0169.207] CloseHandle (hObject=0xac) returned 1 [0169.207] AreFileApisANSI () returned 1 [0169.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 157 [0169.210] CloseHandle (hObject=0xac) returned 1 [0169.210] AreFileApisANSI () returned 1 [0169.211] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e6a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 160 [0169.212] CloseHandle (hObject=0xac) returned 1 [0169.212] AreFileApisANSI () returned 1 [0169.212] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bed58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0169.214] CloseHandle (hObject=0xa8) returned 1 [0169.214] AreFileApisANSI () returned 1 [0169.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf208, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0169.217] CloseHandle (hObject=0xa8) returned 1 [0169.218] AreFileApisANSI () returned 1 [0169.218] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0169.219] CloseHandle (hObject=0xa8) returned 1 [0169.219] AreFileApisANSI () returned 1 [0169.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0169.220] CloseHandle (hObject=0xac) returned 1 [0169.221] AreFileApisANSI () returned 1 [0169.221] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0169.224] CloseHandle (hObject=0xac) returned 1 [0169.224] AreFileApisANSI () returned 1 [0169.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f3c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0169.225] CloseHandle (hObject=0xac) returned 1 [0169.226] AreFileApisANSI () returned 1 [0169.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0169.228] CloseHandle (hObject=0xa8) returned 1 [0169.228] AreFileApisANSI () returned 1 [0169.228] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0169.231] CloseHandle (hObject=0xa8) returned 1 [0169.231] AreFileApisANSI () returned 1 [0169.231] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ebe0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0169.232] CloseHandle (hObject=0xa8) returned 1 [0169.233] AreFileApisANSI () returned 1 [0169.233] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f200, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 160 [0169.234] CloseHandle (hObject=0xac) returned 1 [0169.234] AreFileApisANSI () returned 1 [0169.234] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e6a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 157 [0169.237] CloseHandle (hObject=0xac) returned 1 [0169.237] AreFileApisANSI () returned 1 [0169.237] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ea20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 160 [0169.239] CloseHandle (hObject=0xac) returned 1 [0169.240] AreFileApisANSI () returned 1 [0169.240] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 174 [0169.243] CloseHandle (hObject=0xa8) returned 1 [0169.243] AreFileApisANSI () returned 1 [0169.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0169.245] CloseHandle (hObject=0xa8) returned 1 [0169.245] AreFileApisANSI () returned 1 [0169.245] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 174 [0169.246] CloseHandle (hObject=0xa8) returned 1 [0169.246] AreFileApisANSI () returned 1 [0169.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496d90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 184 [0169.248] CloseHandle (hObject=0xac) returned 1 [0169.249] AreFileApisANSI () returned 1 [0169.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4962a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 181 [0169.251] CloseHandle (hObject=0xac) returned 1 [0169.252] AreFileApisANSI () returned 1 [0169.252] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496188, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 184 [0169.253] CloseHandle (hObject=0xac) returned 1 [0169.253] AreFileApisANSI () returned 1 [0169.254] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 170 [0169.257] CloseHandle (hObject=0xa8) returned 1 [0169.257] AreFileApisANSI () returned 1 [0169.257] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0169.258] CloseHandle (hObject=0xa8) returned 1 [0169.258] AreFileApisANSI () returned 1 [0169.258] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 170 [0169.259] CloseHandle (hObject=0xa8) returned 1 [0169.260] AreFileApisANSI () returned 1 [0169.260] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496818, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 181 [0169.261] CloseHandle (hObject=0xac) returned 1 [0169.261] AreFileApisANSI () returned 1 [0169.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496c78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 178 [0169.264] CloseHandle (hObject=0xac) returned 1 [0169.264] AreFileApisANSI () returned 1 [0169.264] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496c78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 181 [0169.266] CloseHandle (hObject=0xac) returned 1 [0169.266] AreFileApisANSI () returned 1 [0169.266] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 173 [0169.269] CloseHandle (hObject=0xa8) returned 1 [0169.269] AreFileApisANSI () returned 1 [0169.269] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 170 [0169.271] CloseHandle (hObject=0xa8) returned 1 [0169.271] AreFileApisANSI () returned 1 [0169.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 173 [0169.272] CloseHandle (hObject=0xa8) returned 1 [0169.272] AreFileApisANSI () returned 1 [0169.272] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 184 [0169.273] CloseHandle (hObject=0xac) returned 1 [0169.274] AreFileApisANSI () returned 1 [0169.274] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496d90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 181 [0169.276] CloseHandle (hObject=0xac) returned 1 [0169.277] AreFileApisANSI () returned 1 [0169.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496700, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 184 [0169.278] CloseHandle (hObject=0xac) returned 1 [0169.278] AreFileApisANSI () returned 1 [0169.278] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0169.281] CloseHandle (hObject=0xa8) returned 1 [0169.281] AreFileApisANSI () returned 1 [0169.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ef60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0169.282] CloseHandle (hObject=0xa8) returned 1 [0169.283] AreFileApisANSI () returned 1 [0169.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0169.284] CloseHandle (hObject=0xa8) returned 1 [0169.285] AreFileApisANSI () returned 1 [0169.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ee80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 162 [0169.286] CloseHandle (hObject=0xac) returned 1 [0169.287] AreFileApisANSI () returned 1 [0169.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0169.289] CloseHandle (hObject=0xac) returned 1 [0169.290] AreFileApisANSI () returned 1 [0169.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 162 [0169.291] CloseHandle (hObject=0xac) returned 1 [0169.291] AreFileApisANSI () returned 1 [0169.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0169.295] CloseHandle (hObject=0xa8) returned 1 [0169.295] AreFileApisANSI () returned 1 [0169.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0169.297] CloseHandle (hObject=0xa8) returned 1 [0169.297] AreFileApisANSI () returned 1 [0169.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0169.298] CloseHandle (hObject=0xa8) returned 1 [0169.299] AreFileApisANSI () returned 1 [0169.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 180 [0169.310] CloseHandle (hObject=0xac) returned 1 [0169.311] AreFileApisANSI () returned 1 [0169.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 177 [0169.314] CloseHandle (hObject=0xac) returned 1 [0169.314] AreFileApisANSI () returned 1 [0169.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 180 [0169.315] CloseHandle (hObject=0xac) returned 1 [0169.316] AreFileApisANSI () returned 1 [0169.316] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 170 [0169.319] CloseHandle (hObject=0xa8) returned 1 [0169.319] AreFileApisANSI () returned 1 [0169.319] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0169.320] CloseHandle (hObject=0xa8) returned 1 [0169.321] AreFileApisANSI () returned 1 [0169.321] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 170 [0169.322] CloseHandle (hObject=0xa8) returned 1 [0169.322] AreFileApisANSI () returned 1 [0169.322] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496c78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 181 [0169.323] CloseHandle (hObject=0xac) returned 1 [0169.324] AreFileApisANSI () returned 1 [0169.324] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496c78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 178 [0169.326] CloseHandle (hObject=0xac) returned 1 [0169.327] AreFileApisANSI () returned 1 [0169.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496a48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 181 [0169.329] CloseHandle (hObject=0xac) returned 1 [0169.330] AreFileApisANSI () returned 1 [0169.330] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f3c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 158 [0169.333] CloseHandle (hObject=0xa8) returned 1 [0169.334] AreFileApisANSI () returned 1 [0169.334] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ebe0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0169.335] CloseHandle (hObject=0xa8) returned 1 [0169.335] AreFileApisANSI () returned 1 [0169.336] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e6a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 158 [0169.337] CloseHandle (hObject=0xa8) returned 1 [0169.337] AreFileApisANSI () returned 1 [0169.337] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0169.339] CloseHandle (hObject=0xac) returned 1 [0169.340] AreFileApisANSI () returned 1 [0169.340] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0169.342] CloseHandle (hObject=0xac) returned 1 [0169.343] AreFileApisANSI () returned 1 [0169.343] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0169.344] CloseHandle (hObject=0xac) returned 1 [0169.345] AreFileApisANSI () returned 1 [0169.345] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 163 [0169.349] CloseHandle (hObject=0xa8) returned 1 [0169.349] AreFileApisANSI () returned 1 [0169.349] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 160 [0169.350] CloseHandle (hObject=0xa8) returned 1 [0169.350] AreFileApisANSI () returned 1 [0169.350] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 163 [0169.352] CloseHandle (hObject=0xa8) returned 1 [0169.352] AreFileApisANSI () returned 1 [0169.352] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 174 [0169.353] CloseHandle (hObject=0xac) returned 1 [0169.354] AreFileApisANSI () returned 1 [0169.354] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0169.364] CloseHandle (hObject=0xac) returned 1 [0169.364] AreFileApisANSI () returned 1 [0169.364] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 174 [0169.365] CloseHandle (hObject=0xac) returned 1 [0169.366] AreFileApisANSI () returned 1 [0169.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 165 [0169.369] CloseHandle (hObject=0xa8) returned 1 [0169.369] AreFileApisANSI () returned 1 [0169.369] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 162 [0169.371] CloseHandle (hObject=0xa8) returned 1 [0169.371] AreFileApisANSI () returned 1 [0169.371] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 165 [0169.372] CloseHandle (hObject=0xa8) returned 1 [0169.373] AreFileApisANSI () returned 1 [0169.373] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0169.374] CloseHandle (hObject=0xac) returned 1 [0169.374] AreFileApisANSI () returned 1 [0169.374] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 172 [0169.377] CloseHandle (hObject=0xac) returned 1 [0169.377] AreFileApisANSI () returned 1 [0169.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0169.379] CloseHandle (hObject=0xac) returned 1 [0169.379] AreFileApisANSI () returned 1 [0169.379] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0169.387] CloseHandle (hObject=0xa8) returned 1 [0169.387] AreFileApisANSI () returned 1 [0169.387] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0169.388] CloseHandle (hObject=0xa8) returned 1 [0169.389] AreFileApisANSI () returned 1 [0169.389] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0169.390] CloseHandle (hObject=0xa8) returned 1 [0169.390] AreFileApisANSI () returned 1 [0169.390] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0169.391] CloseHandle (hObject=0xac) returned 1 [0169.392] AreFileApisANSI () returned 1 [0169.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 163 [0169.395] CloseHandle (hObject=0xac) returned 1 [0169.395] AreFileApisANSI () returned 1 [0169.395] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0169.397] CloseHandle (hObject=0xac) returned 1 [0169.397] AreFileApisANSI () returned 1 [0169.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf6b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0169.398] CloseHandle (hObject=0xa8) returned 1 [0169.399] AreFileApisANSI () returned 1 [0169.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf6b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0169.401] CloseHandle (hObject=0xa8) returned 1 [0169.402] AreFileApisANSI () returned 1 [0169.402] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bed58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0169.403] CloseHandle (hObject=0xa8) returned 1 [0169.404] AreFileApisANSI () returned 1 [0169.404] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 157 [0169.405] CloseHandle (hObject=0xac) returned 1 [0169.406] AreFileApisANSI () returned 1 [0169.406] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0169.423] CloseHandle (hObject=0xac) returned 1 [0169.424] AreFileApisANSI () returned 1 [0169.424] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f040, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 157 [0169.425] CloseHandle (hObject=0xac) returned 1 [0169.426] AreFileApisANSI () returned 1 [0169.426] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498128, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0169.427] CloseHandle (hObject=0xa4) returned 1 [0169.428] AreFileApisANSI () returned 1 [0169.428] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498a28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0169.429] CloseHandle (hObject=0xa4) returned 1 [0169.429] AreFileApisANSI () returned 1 [0169.429] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4984a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0169.431] CloseHandle (hObject=0xa4) returned 1 [0169.432] AreFileApisANSI () returned 1 [0169.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4981a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0169.434] CloseHandle (hObject=0xa4) returned 1 [0169.434] AreFileApisANSI () returned 1 [0169.434] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4984a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0169.435] CloseHandle (hObject=0xa4) returned 1 [0169.436] AreFileApisANSI () returned 1 [0169.436] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0169.438] CloseHandle (hObject=0xa4) returned 1 [0169.440] AreFileApisANSI () returned 1 [0169.440] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0169.442] CloseHandle (hObject=0xa4) returned 1 [0169.442] AreFileApisANSI () returned 1 [0169.442] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0169.465] CloseHandle (hObject=0xa4) returned 1 [0169.466] AreFileApisANSI () returned 1 [0169.466] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0169.467] CloseHandle (hObject=0xa4) returned 1 [0169.468] AreFileApisANSI () returned 1 [0169.468] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0169.470] CloseHandle (hObject=0xa4) returned 1 [0169.470] AreFileApisANSI () returned 1 [0169.470] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0169.472] CloseHandle (hObject=0xa4) returned 1 [0169.473] AreFileApisANSI () returned 1 [0169.473] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0169.475] CloseHandle (hObject=0xa4) returned 1 [0169.475] AreFileApisANSI () returned 1 [0169.475] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0169.475] AreFileApisANSI () returned 1 [0169.476] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4988a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0169.477] CloseHandle (hObject=0xa4) returned 1 [0169.477] AreFileApisANSI () returned 1 [0169.477] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ca8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0169.478] CloseHandle (hObject=0xa4) returned 1 [0169.479] AreFileApisANSI () returned 1 [0169.479] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0169.480] CloseHandle (hObject=0xa4) returned 1 [0169.480] AreFileApisANSI () returned 1 [0169.480] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0169.481] AreFileApisANSI () returned 1 [0169.481] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0169.481] AreFileApisANSI () returned 1 [0169.481] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0169.482] CloseHandle (hObject=0xa4) returned 1 [0169.483] AreFileApisANSI () returned 1 [0169.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498128, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0169.493] CloseHandle (hObject=0xa4) returned 1 [0169.494] AreFileApisANSI () returned 1 [0169.494] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4981a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0169.495] CloseHandle (hObject=0xa4) returned 1 [0169.495] AreFileApisANSI () returned 1 [0169.496] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0169.497] CloseHandle (hObject=0xa4) returned 1 [0169.497] AreFileApisANSI () returned 1 [0169.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0169.500] CloseHandle (hObject=0xa4) returned 1 [0169.500] AreFileApisANSI () returned 1 [0169.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0169.502] CloseHandle (hObject=0xa4) returned 1 [0169.502] AreFileApisANSI () returned 1 [0169.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4982a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0169.504] CloseHandle (hObject=0xa8) returned 1 [0169.504] AreFileApisANSI () returned 1 [0169.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0169.513] CloseHandle (hObject=0xa8) returned 1 [0169.514] AreFileApisANSI () returned 1 [0169.514] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ca8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0169.515] CloseHandle (hObject=0xa8) returned 1 [0169.516] AreFileApisANSI () returned 1 [0169.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0169.520] CloseHandle (hObject=0xa8) returned 1 [0169.521] AreFileApisANSI () returned 1 [0169.521] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0169.522] CloseHandle (hObject=0xa8) returned 1 [0169.522] AreFileApisANSI () returned 1 [0169.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0169.524] CloseHandle (hObject=0xa8) returned 1 [0169.524] AreFileApisANSI () returned 1 [0169.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4989a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0169.529] CloseHandle (hObject=0xa8) returned 1 [0169.529] AreFileApisANSI () returned 1 [0169.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4983a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0169.530] CloseHandle (hObject=0xa8) returned 1 [0169.531] AreFileApisANSI () returned 1 [0169.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4980a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0169.532] CloseHandle (hObject=0xa8) returned 1 [0169.533] AreFileApisANSI () returned 1 [0169.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0169.535] CloseHandle (hObject=0xa0) returned 1 [0169.535] AreFileApisANSI () returned 1 [0169.535] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0169.539] CloseHandle (hObject=0xa0) returned 1 [0169.539] AreFileApisANSI () returned 1 [0169.539] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0169.541] CloseHandle (hObject=0xa0) returned 1 [0169.541] AreFileApisANSI () returned 1 [0169.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4981a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0169.542] CloseHandle (hObject=0xa4) returned 1 [0169.543] AreFileApisANSI () returned 1 [0169.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498228, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0169.544] CloseHandle (hObject=0xa4) returned 1 [0169.545] AreFileApisANSI () returned 1 [0169.545] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0169.547] CloseHandle (hObject=0xa4) returned 1 [0169.548] AreFileApisANSI () returned 1 [0169.548] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0169.549] CloseHandle (hObject=0xa0) returned 1 [0169.550] AreFileApisANSI () returned 1 [0169.550] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0169.567] CloseHandle (hObject=0xa0) returned 1 [0169.568] AreFileApisANSI () returned 1 [0169.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0169.569] CloseHandle (hObject=0xa0) returned 1 [0169.570] AreFileApisANSI () returned 1 [0169.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0169.571] CloseHandle (hObject=0xa4) returned 1 [0169.572] AreFileApisANSI () returned 1 [0169.572] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4987a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0169.573] CloseHandle (hObject=0xa4) returned 1 [0169.574] AreFileApisANSI () returned 1 [0169.574] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0169.576] CloseHandle (hObject=0xa4) returned 1 [0169.577] AreFileApisANSI () returned 1 [0169.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0169.580] CloseHandle (hObject=0x9c) returned 1 [0169.580] AreFileApisANSI () returned 1 [0169.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0169.581] CloseHandle (hObject=0x9c) returned 1 [0169.582] AreFileApisANSI () returned 1 [0169.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0169.583] CloseHandle (hObject=0x9c) returned 1 [0169.584] AreFileApisANSI () returned 1 [0169.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4986a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0169.587] CloseHandle (hObject=0xa0) returned 1 [0169.587] AreFileApisANSI () returned 1 [0169.587] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4988a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0169.589] CloseHandle (hObject=0xa0) returned 1 [0169.589] AreFileApisANSI () returned 1 [0169.589] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ca8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0169.590] CloseHandle (hObject=0xa0) returned 1 [0169.591] AreFileApisANSI () returned 1 [0169.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0169.592] CloseHandle (hObject=0xa4) returned 1 [0169.593] AreFileApisANSI () returned 1 [0169.593] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0169.610] CloseHandle (hObject=0xa4) returned 1 [0169.611] AreFileApisANSI () returned 1 [0169.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0169.613] CloseHandle (hObject=0xa4) returned 1 [0169.613] AreFileApisANSI () returned 1 [0169.613] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0169.614] CloseHandle (hObject=0xa8) returned 1 [0169.614] AreFileApisANSI () returned 1 [0169.614] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0169.614] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2720, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0169.614] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0169.615] AreFileApisANSI () returned 1 [0169.615] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0169.617] CloseHandle (hObject=0xa4) returned 1 [0169.617] AreFileApisANSI () returned 1 [0169.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0169.621] CloseHandle (hObject=0xa4) returned 1 [0169.622] AreFileApisANSI () returned 1 [0169.622] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0169.623] CloseHandle (hObject=0xa4) returned 1 [0169.623] AreFileApisANSI () returned 1 [0169.623] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0169.624] CloseHandle (hObject=0xa8) returned 1 [0169.624] AreFileApisANSI () returned 1 [0169.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0169.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2a50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0169.624] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0169.625] AreFileApisANSI () returned 1 [0169.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0169.630] CloseHandle (hObject=0xa4) returned 1 [0169.631] AreFileApisANSI () returned 1 [0169.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0169.632] CloseHandle (hObject=0xa4) returned 1 [0169.633] AreFileApisANSI () returned 1 [0169.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0169.634] CloseHandle (hObject=0xa4) returned 1 [0169.634] AreFileApisANSI () returned 1 [0169.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0169.635] CloseHandle (hObject=0xa8) returned 1 [0169.635] AreFileApisANSI () returned 1 [0169.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0169.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a28b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0169.635] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0169.636] AreFileApisANSI () returned 1 [0169.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0169.638] CloseHandle (hObject=0xa4) returned 1 [0169.638] AreFileApisANSI () returned 1 [0169.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0169.641] CloseHandle (hObject=0xa4) returned 1 [0169.641] AreFileApisANSI () returned 1 [0169.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0169.642] CloseHandle (hObject=0xa4) returned 1 [0169.643] AreFileApisANSI () returned 1 [0169.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0169.644] CloseHandle (hObject=0xa8) returned 1 [0169.644] AreFileApisANSI () returned 1 [0169.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0169.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a32d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0169.644] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0169.646] AreFileApisANSI () returned 1 [0169.646] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0169.647] CloseHandle (hObject=0xa4) returned 1 [0169.647] AreFileApisANSI () returned 1 [0169.647] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49be28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0169.650] CloseHandle (hObject=0xa4) returned 1 [0169.650] AreFileApisANSI () returned 1 [0169.650] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0169.651] CloseHandle (hObject=0xa4) returned 1 [0169.652] AreFileApisANSI () returned 1 [0169.652] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0169.652] CloseHandle (hObject=0xa8) returned 1 [0169.652] AreFileApisANSI () returned 1 [0169.652] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0169.652] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0169.653] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0169.654] AreFileApisANSI () returned 1 [0169.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0169.656] CloseHandle (hObject=0xa0) returned 1 [0169.656] AreFileApisANSI () returned 1 [0169.656] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0169.657] CloseHandle (hObject=0xa0) returned 1 [0169.658] AreFileApisANSI () returned 1 [0169.658] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0169.672] CloseHandle (hObject=0xa0) returned 1 [0169.672] AreFileApisANSI () returned 1 [0169.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0169.673] CloseHandle (hObject=0xa4) returned 1 [0169.674] AreFileApisANSI () returned 1 [0169.674] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4987a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0169.675] CloseHandle (hObject=0xa4) returned 1 [0169.676] AreFileApisANSI () returned 1 [0169.676] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498428, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0169.686] CloseHandle (hObject=0xa4) returned 1 [0169.687] AreFileApisANSI () returned 1 [0169.687] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d0f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0169.688] CloseHandle (hObject=0x9c) returned 1 [0169.689] AreFileApisANSI () returned 1 [0169.689] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0169.690] CloseHandle (hObject=0x9c) returned 1 [0169.690] AreFileApisANSI () returned 1 [0169.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cf38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0169.693] CloseHandle (hObject=0x9c) returned 1 [0169.693] AreFileApisANSI () returned 1 [0169.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0169.695] CloseHandle (hObject=0xa0) returned 1 [0169.695] AreFileApisANSI () returned 1 [0169.696] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0169.706] CloseHandle (hObject=0xa0) returned 1 [0169.707] AreFileApisANSI () returned 1 [0169.707] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0169.708] CloseHandle (hObject=0xa0) returned 1 [0169.709] AreFileApisANSI () returned 1 [0169.709] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0169.711] CloseHandle (hObject=0xa4) returned 1 [0169.711] AreFileApisANSI () returned 1 [0169.711] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0169.713] CloseHandle (hObject=0xa4) returned 1 [0169.714] AreFileApisANSI () returned 1 [0169.714] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0169.715] CloseHandle (hObject=0xa4) returned 1 [0169.715] AreFileApisANSI () returned 1 [0169.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4984a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0169.720] CloseHandle (hObject=0xa8) returned 1 [0169.721] AreFileApisANSI () returned 1 [0169.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ca8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0169.723] CloseHandle (hObject=0xa8) returned 1 [0169.723] AreFileApisANSI () returned 1 [0169.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0169.724] CloseHandle (hObject=0xa8) returned 1 [0169.725] AreFileApisANSI () returned 1 [0169.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0169.727] CloseHandle (hObject=0xac) returned 1 [0169.727] AreFileApisANSI () returned 1 [0169.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0169.743] CloseHandle (hObject=0xac) returned 1 [0169.744] AreFileApisANSI () returned 1 [0169.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0169.745] CloseHandle (hObject=0xac) returned 1 [0169.745] AreFileApisANSI () returned 1 [0169.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0169.747] CloseHandle (hObject=0xb0) returned 1 [0169.747] AreFileApisANSI () returned 1 [0169.747] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0169.748] CloseHandle (hObject=0xb0) returned 1 [0169.749] AreFileApisANSI () returned 1 [0169.749] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0169.751] CloseHandle (hObject=0xb0) returned 1 [0169.752] AreFileApisANSI () returned 1 [0169.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0169.772] CloseHandle (hObject=0xb0) returned 1 [0169.773] AreFileApisANSI () returned 1 [0169.773] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0169.774] CloseHandle (hObject=0xb0) returned 1 [0169.774] AreFileApisANSI () returned 1 [0169.774] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0169.776] CloseHandle (hObject=0xb0) returned 1 [0169.852] AreFileApisANSI () returned 1 [0169.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0169.876] CloseHandle (hObject=0xac) returned 1 [0169.877] AreFileApisANSI () returned 1 [0169.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0169.878] CloseHandle (hObject=0xac) returned 1 [0169.878] AreFileApisANSI () returned 1 [0169.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0169.880] CloseHandle (hObject=0xac) returned 1 [0169.880] AreFileApisANSI () returned 1 [0169.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0169.881] CloseHandle (hObject=0xac) returned 1 [0169.881] AreFileApisANSI () returned 1 [0169.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0169.895] CloseHandle (hObject=0xac) returned 1 [0169.895] AreFileApisANSI () returned 1 [0169.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0169.897] CloseHandle (hObject=0xac) returned 1 [0169.897] AreFileApisANSI () returned 1 [0169.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0169.916] CloseHandle (hObject=0xac) returned 1 [0169.916] AreFileApisANSI () returned 1 [0169.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0169.918] CloseHandle (hObject=0xac) returned 1 [0169.918] AreFileApisANSI () returned 1 [0169.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0169.919] CloseHandle (hObject=0xac) returned 1 [0169.921] AreFileApisANSI () returned 1 [0169.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0169.922] CloseHandle (hObject=0xac) returned 1 [0169.923] AreFileApisANSI () returned 1 [0169.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0169.924] CloseHandle (hObject=0xac) returned 1 [0169.925] AreFileApisANSI () returned 1 [0169.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0169.926] CloseHandle (hObject=0xac) returned 1 [0169.926] AreFileApisANSI () returned 1 [0169.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0169.946] CloseHandle (hObject=0xac) returned 1 [0169.947] AreFileApisANSI () returned 1 [0169.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0169.948] CloseHandle (hObject=0xac) returned 1 [0169.948] AreFileApisANSI () returned 1 [0169.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0169.949] CloseHandle (hObject=0xac) returned 1 [0169.949] AreFileApisANSI () returned 1 [0169.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0169.998] CloseHandle (hObject=0xb0) returned 1 [0169.998] AreFileApisANSI () returned 1 [0169.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0169.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0169.998] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png.cryptoid"), dwFlags=0x2) returned 1 [0169.999] AreFileApisANSI () returned 1 [0169.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0170.039] CloseHandle (hObject=0xb0) returned 1 [0170.040] AreFileApisANSI () returned 1 [0170.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0170.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0170.040] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png.cryptoid"), dwFlags=0x2) returned 1 [0170.041] AreFileApisANSI () returned 1 [0170.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0170.090] CloseHandle (hObject=0xb0) returned 1 [0170.090] AreFileApisANSI () returned 1 [0170.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0170.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0170.090] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png.cryptoid"), dwFlags=0x2) returned 1 [0170.092] AreFileApisANSI () returned 1 [0170.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0170.128] CloseHandle (hObject=0xb0) returned 1 [0170.129] AreFileApisANSI () returned 1 [0170.129] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0170.129] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0170.129] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png.cryptoid"), dwFlags=0x2) returned 1 [0170.130] AreFileApisANSI () returned 1 [0170.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0170.170] CloseHandle (hObject=0xb0) returned 1 [0170.171] AreFileApisANSI () returned 1 [0170.171] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0170.171] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0170.171] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png.cryptoid"), dwFlags=0x2) returned 1 [0170.172] AreFileApisANSI () returned 1 [0170.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0170.201] CloseHandle (hObject=0xb0) returned 1 [0170.201] AreFileApisANSI () returned 1 [0170.201] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0170.201] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0170.201] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png.cryptoid"), dwFlags=0x2) returned 1 [0170.202] AreFileApisANSI () returned 1 [0170.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0170.239] CloseHandle (hObject=0xb0) returned 1 [0170.239] AreFileApisANSI () returned 1 [0170.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0170.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0170.240] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png.cryptoid"), dwFlags=0x2) returned 1 [0170.241] AreFileApisANSI () returned 1 [0170.241] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0170.242] CloseHandle (hObject=0xa0) returned 1 [0170.242] AreFileApisANSI () returned 1 [0170.242] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0170.248] CloseHandle (hObject=0xa0) returned 1 [0170.249] AreFileApisANSI () returned 1 [0170.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0170.250] CloseHandle (hObject=0xa0) returned 1 [0170.250] AreFileApisANSI () returned 1 [0170.250] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498828, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0170.252] CloseHandle (hObject=0xa4) returned 1 [0170.252] AreFileApisANSI () returned 1 [0170.252] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498828, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0170.254] CloseHandle (hObject=0xa4) returned 1 [0170.254] AreFileApisANSI () returned 1 [0170.254] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4986a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0170.256] CloseHandle (hObject=0xa4) returned 1 [0170.257] AreFileApisANSI () returned 1 [0170.257] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d1f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0170.258] CloseHandle (hObject=0x9c) returned 1 [0170.258] AreFileApisANSI () returned 1 [0170.258] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0170.260] CloseHandle (hObject=0x9c) returned 1 [0170.260] AreFileApisANSI () returned 1 [0170.260] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cfe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0170.271] CloseHandle (hObject=0x9c) returned 1 [0170.272] AreFileApisANSI () returned 1 [0170.272] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0170.286] CloseHandle (hObject=0xa0) returned 1 [0170.287] AreFileApisANSI () returned 1 [0170.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0170.288] CloseHandle (hObject=0xa0) returned 1 [0170.289] AreFileApisANSI () returned 1 [0170.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0170.290] CloseHandle (hObject=0xa0) returned 1 [0170.290] AreFileApisANSI () returned 1 [0170.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0170.300] CloseHandle (hObject=0xa4) returned 1 [0170.309] AreFileApisANSI () returned 1 [0170.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0170.311] CloseHandle (hObject=0xa4) returned 1 [0170.311] AreFileApisANSI () returned 1 [0170.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0170.312] CloseHandle (hObject=0xa4) returned 1 [0170.313] AreFileApisANSI () returned 1 [0170.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0170.316] CloseHandle (hObject=0xa8) returned 1 [0170.316] AreFileApisANSI () returned 1 [0170.316] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0170.317] CloseHandle (hObject=0xa8) returned 1 [0170.318] AreFileApisANSI () returned 1 [0170.318] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0170.321] CloseHandle (hObject=0xa8) returned 1 [0170.321] AreFileApisANSI () returned 1 [0170.321] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0170.323] CloseHandle (hObject=0xa8) returned 1 [0170.323] AreFileApisANSI () returned 1 [0170.323] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0170.325] CloseHandle (hObject=0xa8) returned 1 [0170.325] AreFileApisANSI () returned 1 [0170.325] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0170.328] CloseHandle (hObject=0xa8) returned 1 [0170.329] AreFileApisANSI () returned 1 [0170.329] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0170.330] CloseHandle (hObject=0xa8) returned 1 [0170.331] AreFileApisANSI () returned 1 [0170.331] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0170.333] CloseHandle (hObject=0xa8) returned 1 [0170.333] AreFileApisANSI () returned 1 [0170.333] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0170.336] CloseHandle (hObject=0xa8) returned 1 [0170.337] AreFileApisANSI () returned 1 [0170.337] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0170.338] CloseHandle (hObject=0xa8) returned 1 [0170.339] AreFileApisANSI () returned 1 [0170.339] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0170.342] CloseHandle (hObject=0xa8) returned 1 [0170.342] AreFileApisANSI () returned 1 [0170.342] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0170.355] CloseHandle (hObject=0xa8) returned 1 [0170.356] AreFileApisANSI () returned 1 [0170.356] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0170.359] CloseHandle (hObject=0xa4) returned 1 [0170.360] AreFileApisANSI () returned 1 [0170.360] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0170.361] CloseHandle (hObject=0xa4) returned 1 [0170.362] AreFileApisANSI () returned 1 [0170.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0170.365] CloseHandle (hObject=0xa4) returned 1 [0170.366] AreFileApisANSI () returned 1 [0170.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0170.367] CloseHandle (hObject=0xa4) returned 1 [0170.367] AreFileApisANSI () returned 1 [0170.367] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0170.369] CloseHandle (hObject=0xa4) returned 1 [0170.369] AreFileApisANSI () returned 1 [0170.369] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0170.372] CloseHandle (hObject=0xa4) returned 1 [0170.373] AreFileApisANSI () returned 1 [0170.373] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0170.375] CloseHandle (hObject=0xa4) returned 1 [0170.375] AreFileApisANSI () returned 1 [0170.375] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0170.377] CloseHandle (hObject=0xa4) returned 1 [0170.378] AreFileApisANSI () returned 1 [0170.378] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0170.385] CloseHandle (hObject=0xa4) returned 1 [0170.385] AreFileApisANSI () returned 1 [0170.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0170.388] CloseHandle (hObject=0xa4) returned 1 [0170.389] AreFileApisANSI () returned 1 [0170.389] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0170.392] CloseHandle (hObject=0xa4) returned 1 [0170.393] AreFileApisANSI () returned 1 [0170.393] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ef60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0170.395] CloseHandle (hObject=0xa4) returned 1 [0170.396] AreFileApisANSI () returned 1 [0170.396] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 165 [0170.406] CloseHandle (hObject=0xa8) returned 1 [0170.406] AreFileApisANSI () returned 1 [0170.406] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 162 [0170.408] CloseHandle (hObject=0xa8) returned 1 [0170.409] AreFileApisANSI () returned 1 [0170.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499698, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 165 [0170.410] CloseHandle (hObject=0xa8) returned 1 [0170.411] AreFileApisANSI () returned 1 [0170.411] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0170.451] CloseHandle (hObject=0xac) returned 1 [0170.452] AreFileApisANSI () returned 1 [0170.452] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0170.452] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a09f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 173 [0170.452] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0170.453] AreFileApisANSI () returned 1 [0170.453] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0170.455] CloseHandle (hObject=0xa4) returned 1 [0170.455] AreFileApisANSI () returned 1 [0170.455] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0170.457] CloseHandle (hObject=0xa4) returned 1 [0170.457] AreFileApisANSI () returned 1 [0170.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0170.466] CloseHandle (hObject=0xa4) returned 1 [0170.468] AreFileApisANSI () returned 1 [0170.468] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0170.469] CloseHandle (hObject=0xa4) returned 1 [0170.470] AreFileApisANSI () returned 1 [0170.470] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0170.472] CloseHandle (hObject=0xa4) returned 1 [0170.473] AreFileApisANSI () returned 1 [0170.473] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0170.474] CloseHandle (hObject=0xa4) returned 1 [0170.475] AreFileApisANSI () returned 1 [0170.475] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0170.490] CloseHandle (hObject=0xa8) returned 1 [0170.491] AreFileApisANSI () returned 1 [0170.491] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0170.491] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0170.491] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0170.493] AreFileApisANSI () returned 1 [0170.493] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0170.494] CloseHandle (hObject=0xa4) returned 1 [0170.494] AreFileApisANSI () returned 1 [0170.494] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0170.495] CloseHandle (hObject=0xa4) returned 1 [0170.496] AreFileApisANSI () returned 1 [0170.496] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0170.498] CloseHandle (hObject=0xa4) returned 1 [0170.499] AreFileApisANSI () returned 1 [0170.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0170.500] CloseHandle (hObject=0xa4) returned 1 [0170.500] AreFileApisANSI () returned 1 [0170.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0170.501] CloseHandle (hObject=0xa4) returned 1 [0170.502] AreFileApisANSI () returned 1 [0170.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0170.516] CloseHandle (hObject=0xa4) returned 1 [0170.516] AreFileApisANSI () returned 1 [0170.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0170.518] CloseHandle (hObject=0xa0) returned 1 [0170.518] AreFileApisANSI () returned 1 [0170.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0170.519] CloseHandle (hObject=0xa0) returned 1 [0170.520] AreFileApisANSI () returned 1 [0170.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0170.520] CloseHandle (hObject=0xa0) returned 1 [0170.521] AreFileApisANSI () returned 1 [0170.521] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0170.524] CloseHandle (hObject=0xa4) returned 1 [0170.524] AreFileApisANSI () returned 1 [0170.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0170.525] CloseHandle (hObject=0xa4) returned 1 [0170.526] AreFileApisANSI () returned 1 [0170.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0170.527] CloseHandle (hObject=0xa4) returned 1 [0170.527] AreFileApisANSI () returned 1 [0170.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0170.529] CloseHandle (hObject=0xa8) returned 1 [0170.529] AreFileApisANSI () returned 1 [0170.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0170.530] CloseHandle (hObject=0xa8) returned 1 [0170.530] AreFileApisANSI () returned 1 [0170.530] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0170.532] CloseHandle (hObject=0xa8) returned 1 [0170.533] AreFileApisANSI () returned 1 [0170.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0170.534] CloseHandle (hObject=0xa8) returned 1 [0170.534] AreFileApisANSI () returned 1 [0170.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0170.536] CloseHandle (hObject=0xa8) returned 1 [0170.536] AreFileApisANSI () returned 1 [0170.536] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0170.549] CloseHandle (hObject=0xa8) returned 1 [0170.549] AreFileApisANSI () returned 1 [0170.549] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0170.551] CloseHandle (hObject=0xa8) returned 1 [0170.552] AreFileApisANSI () returned 1 [0170.552] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0170.553] CloseHandle (hObject=0xa8) returned 1 [0170.553] AreFileApisANSI () returned 1 [0170.553] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0170.558] CloseHandle (hObject=0xa8) returned 1 [0170.559] AreFileApisANSI () returned 1 [0170.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0170.560] CloseHandle (hObject=0xa8) returned 1 [0170.561] AreFileApisANSI () returned 1 [0170.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0170.561] CloseHandle (hObject=0xa8) returned 1 [0170.562] AreFileApisANSI () returned 1 [0170.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0170.564] CloseHandle (hObject=0xa8) returned 1 [0170.564] AreFileApisANSI () returned 1 [0170.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0170.566] CloseHandle (hObject=0xa4) returned 1 [0170.567] AreFileApisANSI () returned 1 [0170.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0170.568] CloseHandle (hObject=0xa4) returned 1 [0170.568] AreFileApisANSI () returned 1 [0170.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0170.573] CloseHandle (hObject=0xa4) returned 1 [0170.573] AreFileApisANSI () returned 1 [0170.573] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0170.575] CloseHandle (hObject=0xa4) returned 1 [0170.576] AreFileApisANSI () returned 1 [0170.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0170.577] CloseHandle (hObject=0xa4) returned 1 [0170.577] AreFileApisANSI () returned 1 [0170.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0170.580] CloseHandle (hObject=0xa4) returned 1 [0170.580] AreFileApisANSI () returned 1 [0170.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0170.581] CloseHandle (hObject=0xa4) returned 1 [0170.582] AreFileApisANSI () returned 1 [0170.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0170.583] CloseHandle (hObject=0xa4) returned 1 [0170.583] AreFileApisANSI () returned 1 [0170.583] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0170.585] CloseHandle (hObject=0xa4) returned 1 [0170.586] AreFileApisANSI () returned 1 [0170.586] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4963b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 184 [0170.591] CloseHandle (hObject=0xa4) returned 1 [0170.591] AreFileApisANSI () returned 1 [0170.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496930, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 181 [0170.592] CloseHandle (hObject=0xa4) returned 1 [0170.592] AreFileApisANSI () returned 1 [0170.593] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496818, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 184 [0170.593] CloseHandle (hObject=0xa4) returned 1 [0170.594] AreFileApisANSI () returned 1 [0170.594] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a8670, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 200 [0170.606] CloseHandle (hObject=0xa8) returned 1 [0170.606] AreFileApisANSI () returned 1 [0170.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a8420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 197 [0170.608] CloseHandle (hObject=0xa8) returned 1 [0170.608] AreFileApisANSI () returned 1 [0170.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a80a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 200 [0170.611] CloseHandle (hObject=0xa8) returned 1 [0170.611] AreFileApisANSI () returned 1 [0170.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 199 [0170.631] CloseHandle (hObject=0xac) returned 1 [0170.632] AreFileApisANSI () returned 1 [0170.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 199 [0170.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 208 [0170.632] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0170.633] AreFileApisANSI () returned 1 [0170.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0170.634] CloseHandle (hObject=0xa4) returned 1 [0170.634] AreFileApisANSI () returned 1 [0170.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0170.635] CloseHandle (hObject=0xa4) returned 1 [0170.636] AreFileApisANSI () returned 1 [0170.636] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0170.638] CloseHandle (hObject=0xa4) returned 1 [0170.639] AreFileApisANSI () returned 1 [0170.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0170.651] CloseHandle (hObject=0xa4) returned 1 [0170.651] AreFileApisANSI () returned 1 [0170.651] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0170.654] CloseHandle (hObject=0xa4) returned 1 [0170.654] AreFileApisANSI () returned 1 [0170.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0170.655] CloseHandle (hObject=0xa4) returned 1 [0170.655] AreFileApisANSI () returned 1 [0170.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0170.670] CloseHandle (hObject=0xa8) returned 1 [0170.671] AreFileApisANSI () returned 1 [0170.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0170.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0170.671] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0170.672] AreFileApisANSI () returned 1 [0170.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0170.673] CloseHandle (hObject=0xa4) returned 1 [0170.674] AreFileApisANSI () returned 1 [0170.674] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0170.675] CloseHandle (hObject=0xa4) returned 1 [0170.675] AreFileApisANSI () returned 1 [0170.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0170.675] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\SystemAppData\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\systemappdata\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.682] GetFileType (hFile=0xa4) returned 0x1 [0170.682] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.683] CloseHandle (hObject=0xa4) returned 1 [0170.683] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x494e60 [0170.684] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.684] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.684] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.684] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.684] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0 [0170.684] FindClose (in: hFindFile=0x494e60 | out: hFindFile=0x494e60) returned 1 [0170.684] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0170.684] AreFileApisANSI () returned 1 [0170.684] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0170.684] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\tempstate\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.685] GetFileType (hFile=0xa4) returned 0x1 [0170.685] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.686] CloseHandle (hObject=0xa4) returned 1 [0170.686] AreFileApisANSI () returned 1 [0170.686] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0170.686] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\tempstate\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.687] GetFileType (hFile=0xa4) returned 0x1 [0170.687] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.687] CloseHandle (hObject=0xa4) returned 1 [0170.688] AreFileApisANSI () returned 1 [0170.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0170.688] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\tempstate\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.689] GetFileType (hFile=0xa4) returned 0x1 [0170.689] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.690] CloseHandle (hObject=0xa4) returned 1 [0170.690] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x494ee0 [0170.691] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.691] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.691] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.691] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.691] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0 [0170.691] FindClose (in: hFindFile=0x494ee0 | out: hFindFile=0x494ee0) returned 1 [0170.691] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 0 [0170.692] FindClose (in: hFindFile=0x494be0 | out: hFindFile=0x494be0) returned 1 [0170.692] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0170.692] AreFileApisANSI () returned 1 [0170.692] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0170.692] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3db3b4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa0 [0170.701] GetFileType (hFile=0xa0) returned 0x1 [0170.701] WriteFile (in: hFile=0xa0, lpBuffer=0x3da060*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3da058, lpOverlapped=0x0 | out: lpBuffer=0x3da060*, lpNumberOfBytesWritten=0x3da058*=0x423, lpOverlapped=0x0) returned 1 [0170.702] CloseHandle (hObject=0xa0) returned 1 [0170.702] AreFileApisANSI () returned 1 [0170.702] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0170.702] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3db3b4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa0 [0170.703] GetFileType (hFile=0xa0) returned 0x1 [0170.703] WriteFile (in: hFile=0xa0, lpBuffer=0x3da060*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3da058, lpOverlapped=0x0 | out: lpBuffer=0x3da060*, lpNumberOfBytesWritten=0x3da058*=0x423, lpOverlapped=0x0) returned 1 [0170.703] CloseHandle (hObject=0xa0) returned 1 [0170.704] AreFileApisANSI () returned 1 [0170.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0170.704] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3db3b4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa0 [0170.704] GetFileType (hFile=0xa0) returned 0x1 [0170.705] WriteFile (in: hFile=0xa0, lpBuffer=0x3da060*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3da058, lpOverlapped=0x0 | out: lpBuffer=0x3da060*, lpNumberOfBytesWritten=0x3da058*=0x423, lpOverlapped=0x0) returned 1 [0170.705] CloseHandle (hObject=0xa0) returned 1 [0170.705] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\*", lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 0x494be0 [0170.706] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0170.706] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0170.706] AreFileApisANSI () returned 1 [0170.706] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0170.706] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.719] GetFileType (hFile=0xa4) returned 0x1 [0170.719] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.722] CloseHandle (hObject=0xa4) returned 1 [0170.723] AreFileApisANSI () returned 1 [0170.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0170.723] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.724] GetFileType (hFile=0xa4) returned 0x1 [0170.724] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.725] CloseHandle (hObject=0xa4) returned 1 [0170.725] AreFileApisANSI () returned 1 [0170.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0170.725] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.726] GetFileType (hFile=0xa4) returned 0x1 [0170.726] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.726] CloseHandle (hObject=0xa4) returned 1 [0170.727] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x494c20 [0170.727] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.727] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.727] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.727] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.727] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.727] AreFileApisANSI () returned 1 [0170.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0170.727] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inetcache\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0170.728] GetFileType (hFile=0xa8) returned 0x1 [0170.729] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0170.731] CloseHandle (hObject=0xa8) returned 1 [0170.732] AreFileApisANSI () returned 1 [0170.732] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0170.732] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inetcache\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0170.733] GetFileType (hFile=0xa8) returned 0x1 [0170.733] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0170.734] CloseHandle (hObject=0xa8) returned 1 [0170.734] AreFileApisANSI () returned 1 [0170.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0170.734] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inetcache\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0170.748] GetFileType (hFile=0xa8) returned 0x1 [0170.748] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0170.749] CloseHandle (hObject=0xa8) returned 1 [0170.750] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0x4948e0 [0170.750] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.750] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.750] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.750] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.750] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0 [0170.750] FindClose (in: hFindFile=0x4948e0 | out: hFindFile=0x4948e0) returned 1 [0170.751] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.751] AreFileApisANSI () returned 1 [0170.751] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0170.751] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inetcookies\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0170.752] GetFileType (hFile=0xa8) returned 0x1 [0170.752] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0170.753] CloseHandle (hObject=0xa8) returned 1 [0170.753] AreFileApisANSI () returned 1 [0170.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0170.753] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inetcookies\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0170.754] GetFileType (hFile=0xa8) returned 0x1 [0170.754] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0170.755] CloseHandle (hObject=0xa8) returned 1 [0170.756] AreFileApisANSI () returned 1 [0170.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0170.756] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inetcookies\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0170.758] GetFileType (hFile=0xa8) returned 0x1 [0170.758] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0170.759] CloseHandle (hObject=0xa8) returned 1 [0170.760] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0x4948e0 [0170.760] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.760] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.760] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.760] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.760] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0 [0170.760] FindClose (in: hFindFile=0x4948e0 | out: hFindFile=0x4948e0) returned 1 [0170.760] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.760] AreFileApisANSI () returned 1 [0170.760] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0170.761] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inethistory\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0170.761] GetFileType (hFile=0xa8) returned 0x1 [0170.761] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0170.762] CloseHandle (hObject=0xa8) returned 1 [0170.763] AreFileApisANSI () returned 1 [0170.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0170.763] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inethistory\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0170.765] GetFileType (hFile=0xa8) returned 0x1 [0170.765] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0170.766] CloseHandle (hObject=0xa8) returned 1 [0170.767] AreFileApisANSI () returned 1 [0170.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0170.767] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inethistory\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0170.775] GetFileType (hFile=0xa8) returned 0x1 [0170.776] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0170.777] CloseHandle (hObject=0xa8) returned 1 [0170.777] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0x494c60 [0170.777] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.777] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.777] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.777] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.777] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0 [0170.777] FindClose (in: hFindFile=0x494c60 | out: hFindFile=0x494c60) returned 1 [0170.778] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.778] AreFileApisANSI () returned 1 [0170.778] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0170.778] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\temp\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0170.779] GetFileType (hFile=0xa8) returned 0x1 [0170.779] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0170.780] CloseHandle (hObject=0xa8) returned 1 [0170.780] AreFileApisANSI () returned 1 [0170.780] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0170.781] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\temp\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0170.781] GetFileType (hFile=0xa8) returned 0x1 [0170.781] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0170.783] CloseHandle (hObject=0xa8) returned 1 [0170.783] AreFileApisANSI () returned 1 [0170.783] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0170.783] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\temp\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0170.786] GetFileType (hFile=0xa8) returned 0x1 [0170.787] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0170.788] CloseHandle (hObject=0xa8) returned 1 [0170.788] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0x494a60 [0170.788] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.789] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.789] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.789] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.789] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0 [0170.789] FindClose (in: hFindFile=0x494a60 | out: hFindFile=0x494a60) returned 1 [0170.789] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0 [0170.789] FindClose (in: hFindFile=0x494c20 | out: hFindFile=0x494c20) returned 1 [0170.790] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0170.790] AreFileApisANSI () returned 1 [0170.790] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0170.790] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\appdata\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.792] GetFileType (hFile=0xa4) returned 0x1 [0170.792] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.793] CloseHandle (hObject=0xa4) returned 1 [0170.794] AreFileApisANSI () returned 1 [0170.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0170.794] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\appdata\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.794] GetFileType (hFile=0xa4) returned 0x1 [0170.795] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.796] CloseHandle (hObject=0xa4) returned 1 [0170.796] AreFileApisANSI () returned 1 [0170.796] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0170.796] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\appdata\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.799] GetFileType (hFile=0xa4) returned 0x1 [0170.799] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.800] CloseHandle (hObject=0xa4) returned 1 [0170.802] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x494b60 [0170.802] FindNextFileA (in: hFindFile=0x494b60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.802] FindNextFileA (in: hFindFile=0x494b60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.802] FindNextFileA (in: hFindFile=0x494b60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.802] FindNextFileA (in: hFindFile=0x494b60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.802] FindNextFileA (in: hFindFile=0x494b60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0 [0170.802] FindClose (in: hFindFile=0x494b60 | out: hFindFile=0x494b60) returned 1 [0170.802] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0170.803] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0170.803] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0170.803] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0170.803] AreFileApisANSI () returned 1 [0170.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0170.803] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\localcache\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.804] GetFileType (hFile=0xa4) returned 0x1 [0170.804] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.805] CloseHandle (hObject=0xa4) returned 1 [0170.805] AreFileApisANSI () returned 1 [0170.805] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0170.806] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\localcache\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.806] GetFileType (hFile=0xa4) returned 0x1 [0170.806] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.808] CloseHandle (hObject=0xa4) returned 1 [0170.808] AreFileApisANSI () returned 1 [0170.808] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0170.808] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\localcache\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.877] GetFileType (hFile=0xa4) returned 0x1 [0170.877] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.878] CloseHandle (hObject=0xa4) returned 1 [0170.878] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x494960 [0170.879] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.879] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.879] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.879] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.879] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0 [0170.879] FindClose (in: hFindFile=0x494960 | out: hFindFile=0x494960) returned 1 [0170.879] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0170.879] AreFileApisANSI () returned 1 [0170.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0170.880] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\localstate\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.881] GetFileType (hFile=0xa4) returned 0x1 [0170.881] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.882] CloseHandle (hObject=0xa4) returned 1 [0170.882] AreFileApisANSI () returned 1 [0170.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0170.882] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\localstate\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.883] GetFileType (hFile=0xa4) returned 0x1 [0170.883] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.884] CloseHandle (hObject=0xa4) returned 1 [0170.884] AreFileApisANSI () returned 1 [0170.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0170.884] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\localstate\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.887] GetFileType (hFile=0xa4) returned 0x1 [0170.887] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.888] CloseHandle (hObject=0xa4) returned 1 [0170.888] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x494fe0 [0170.888] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.888] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.888] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.888] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.888] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0 [0170.889] FindClose (in: hFindFile=0x494fe0 | out: hFindFile=0x494fe0) returned 1 [0170.889] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0170.889] AreFileApisANSI () returned 1 [0170.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 173 [0170.889] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.892] GetFileType (hFile=0xa4) returned 0x1 [0170.893] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.898] CloseHandle (hObject=0xa4) returned 1 [0170.898] AreFileApisANSI () returned 1 [0170.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 170 [0170.898] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.899] GetFileType (hFile=0xa4) returned 0x1 [0170.899] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.900] CloseHandle (hObject=0xa4) returned 1 [0170.900] AreFileApisANSI () returned 1 [0170.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 173 [0170.900] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0170.901] GetFileType (hFile=0xa4) returned 0x1 [0170.901] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0170.902] CloseHandle (hObject=0xa4) returned 1 [0170.903] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x4949e0 [0170.903] FindNextFileA (in: hFindFile=0x4949e0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.903] FindNextFileA (in: hFindFile=0x4949e0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0170.903] AreFileApisANSI () returned 1 [0170.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496c78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 189 [0170.903] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0170.907] GetFileType (hFile=0xa8) returned 0x1 [0170.907] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0170.908] CloseHandle (hObject=0xa8) returned 1 [0170.909] AreFileApisANSI () returned 1 [0170.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 186 [0170.909] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0170.910] GetFileType (hFile=0xa8) returned 0x1 [0170.910] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0170.911] CloseHandle (hObject=0xa8) returned 1 [0170.911] AreFileApisANSI () returned 1 [0170.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4962a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 189 [0170.912] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0170.912] GetFileType (hFile=0xa8) returned 0x1 [0170.912] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0170.913] CloseHandle (hObject=0xa8) returned 1 [0170.914] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0x494aa0 [0170.914] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.914] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0170.914] AreFileApisANSI () returned 1 [0170.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 188 [0170.914] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0b8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0170.915] GetFileType (hFile=0xac) returned 0x1 [0170.916] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da168 | out: lpNewFilePointer=0x0) returned 1 [0170.916] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da11c | out: lpNewFilePointer=0x0) returned 1 [0170.916] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da14c | out: lpNewFilePointer=0x0) returned 1 [0170.916] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.916] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.916] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da14c | out: lpNewFilePointer=0x0) returned 1 [0170.916] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.916] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.916] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.919] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.919] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.919] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.920] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.920] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.920] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.920] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.920] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.920] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.920] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.920] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.920] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.921] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.921] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.921] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.921] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.921] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.921] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.922] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.922] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.922] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.922] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.922] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.922] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.922] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.922] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.923] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.923] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.923] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.923] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.923] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.923] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.923] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.923] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.923] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.924] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.924] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.924] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.924] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.924] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.924] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.924] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.924] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.924] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.925] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.925] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.925] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.925] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.925] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.926] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.926] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.926] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.926] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.926] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.926] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.926] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.926] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.926] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.927] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.927] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.927] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.927] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.927] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.927] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.927] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.927] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.927] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.927] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.928] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.928] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.928] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.928] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.928] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.928] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.928] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.928] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.928] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.928] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.928] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.929] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.929] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.929] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.929] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.929] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.929] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.929] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.929] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.929] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.929] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.930] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.930] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.930] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.930] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.930] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.930] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.930] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.930] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.930] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.930] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.930] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.931] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.931] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.931] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.931] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.931] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.931] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.931] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.931] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.931] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.931] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.932] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.932] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.932] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.932] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.932] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.932] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.932] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.932] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.932] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.932] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.932] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.933] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.933] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.933] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.933] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.933] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.933] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.933] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.933] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.933] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.933] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.933] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.934] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.934] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.934] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.934] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.934] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.934] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.934] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.934] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.934] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.934] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.935] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.935] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.935] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.935] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.935] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.935] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.935] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.935] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.935] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.935] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.935] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.936] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.936] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.936] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.936] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.936] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.936] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.936] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.936] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.936] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.936] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.937] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.937] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.937] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.937] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.937] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.937] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.937] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.937] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.937] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.937] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.938] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.938] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.938] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.938] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.938] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.938] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.938] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.938] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.938] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.938] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.939] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.939] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.939] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.939] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.939] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.939] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.939] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.939] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.939] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.940] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.940] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.940] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.940] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.940] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.940] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.940] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.940] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.940] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.940] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.941] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.941] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.941] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.941] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.941] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.942] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.942] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.942] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.942] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.942] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.942] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.942] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.942] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.942] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.942] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.943] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.943] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.943] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.943] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.943] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.943] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.943] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.943] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.943] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.943] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.944] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.944] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.944] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.944] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.944] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.944] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.944] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.944] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.944] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.944] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.945] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.945] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.945] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.945] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.945] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.945] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.945] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.945] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.945] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.945] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.946] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.946] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.946] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.946] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.946] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.946] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.946] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.946] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.946] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.946] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.947] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.947] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.947] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.947] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.947] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.947] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.947] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.947] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.947] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.947] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.948] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.948] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.948] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.948] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.948] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.948] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.948] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.948] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.948] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.949] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.949] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.949] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.949] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.949] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.949] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.949] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.949] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.949] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.949] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.950] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.950] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.950] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.950] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.950] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0170.950] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0170.950] WriteFile (in: hFile=0xac, lpBuffer=0x4b3d90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0170.950] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0170.950] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0170.950] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0170.951] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0170.951] ReadFile (in: hFile=0xac, lpBuffer=0x4b3d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b3d90*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0170.951] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0170.951] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0170.951] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0171.055] CloseHandle (hObject=0xac) returned 1 [0171.060] AreFileApisANSI () returned 1 [0171.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 188 [0171.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 197 [0171.060] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0171.061] AreFileApisANSI () returned 1 [0171.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0171.062] CloseHandle (hObject=0xa4) returned 1 [0171.063] AreFileApisANSI () returned 1 [0171.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0171.065] CloseHandle (hObject=0xa4) returned 1 [0171.066] AreFileApisANSI () returned 1 [0171.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0171.081] CloseHandle (hObject=0xa4) returned 1 [0171.083] AreFileApisANSI () returned 1 [0171.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0171.096] CloseHandle (hObject=0xa4) returned 1 [0171.097] AreFileApisANSI () returned 1 [0171.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0171.098] CloseHandle (hObject=0xa4) returned 1 [0171.099] AreFileApisANSI () returned 1 [0171.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0171.100] CloseHandle (hObject=0xa4) returned 1 [0171.101] AreFileApisANSI () returned 1 [0171.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0171.122] CloseHandle (hObject=0xa8) returned 1 [0171.123] AreFileApisANSI () returned 1 [0171.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0171.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0171.123] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0171.125] AreFileApisANSI () returned 1 [0171.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0171.133] CloseHandle (hObject=0xa4) returned 1 [0171.133] AreFileApisANSI () returned 1 [0171.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0171.135] CloseHandle (hObject=0xa4) returned 1 [0171.136] AreFileApisANSI () returned 1 [0171.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0171.150] CloseHandle (hObject=0xa4) returned 1 [0171.151] AreFileApisANSI () returned 1 [0171.151] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0171.153] CloseHandle (hObject=0xa4) returned 1 [0171.153] AreFileApisANSI () returned 1 [0171.153] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0171.154] CloseHandle (hObject=0xa4) returned 1 [0171.155] AreFileApisANSI () returned 1 [0171.155] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0171.164] CloseHandle (hObject=0xa4) returned 1 [0171.165] AreFileApisANSI () returned 1 [0171.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0171.206] CloseHandle (hObject=0xa0) returned 1 [0171.206] AreFileApisANSI () returned 1 [0171.206] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0171.208] CloseHandle (hObject=0xa0) returned 1 [0171.208] AreFileApisANSI () returned 1 [0171.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0171.209] CloseHandle (hObject=0xa0) returned 1 [0171.210] AreFileApisANSI () returned 1 [0171.210] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0171.225] CloseHandle (hObject=0xa4) returned 1 [0171.226] AreFileApisANSI () returned 1 [0171.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0171.227] CloseHandle (hObject=0xa4) returned 1 [0171.228] AreFileApisANSI () returned 1 [0171.228] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0171.229] CloseHandle (hObject=0xa4) returned 1 [0171.230] AreFileApisANSI () returned 1 [0171.230] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0171.232] CloseHandle (hObject=0xa8) returned 1 [0171.233] AreFileApisANSI () returned 1 [0171.233] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0171.234] CloseHandle (hObject=0xa8) returned 1 [0171.235] AreFileApisANSI () returned 1 [0171.235] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0171.254] CloseHandle (hObject=0xa8) returned 1 [0171.255] AreFileApisANSI () returned 1 [0171.255] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0171.256] CloseHandle (hObject=0xa8) returned 1 [0171.257] AreFileApisANSI () returned 1 [0171.257] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0171.258] CloseHandle (hObject=0xa8) returned 1 [0171.258] AreFileApisANSI () returned 1 [0171.258] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0171.263] CloseHandle (hObject=0xa8) returned 1 [0171.263] AreFileApisANSI () returned 1 [0171.263] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0171.264] CloseHandle (hObject=0xa8) returned 1 [0171.265] AreFileApisANSI () returned 1 [0171.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0171.267] CloseHandle (hObject=0xa8) returned 1 [0171.267] AreFileApisANSI () returned 1 [0171.267] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0171.270] CloseHandle (hObject=0xa8) returned 1 [0171.271] AreFileApisANSI () returned 1 [0171.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0171.272] CloseHandle (hObject=0xa8) returned 1 [0171.272] AreFileApisANSI () returned 1 [0171.272] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0171.274] CloseHandle (hObject=0xa8) returned 1 [0171.274] AreFileApisANSI () returned 1 [0171.274] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0171.304] CloseHandle (hObject=0xa8) returned 1 [0171.305] AreFileApisANSI () returned 1 [0171.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0171.307] CloseHandle (hObject=0xa4) returned 1 [0171.307] AreFileApisANSI () returned 1 [0171.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0171.333] CloseHandle (hObject=0xa4) returned 1 [0171.334] AreFileApisANSI () returned 1 [0171.334] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0171.337] CloseHandle (hObject=0xa4) returned 1 [0171.337] AreFileApisANSI () returned 1 [0171.337] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0171.339] CloseHandle (hObject=0xa4) returned 1 [0171.339] AreFileApisANSI () returned 1 [0171.339] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0171.341] CloseHandle (hObject=0xa4) returned 1 [0171.341] AreFileApisANSI () returned 1 [0171.341] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0171.344] CloseHandle (hObject=0xa4) returned 1 [0171.344] AreFileApisANSI () returned 1 [0171.344] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0171.345] CloseHandle (hObject=0xa4) returned 1 [0171.346] AreFileApisANSI () returned 1 [0171.346] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0171.347] CloseHandle (hObject=0xa4) returned 1 [0171.348] AreFileApisANSI () returned 1 [0171.348] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0171.351] CloseHandle (hObject=0xa4) returned 1 [0171.351] AreFileApisANSI () returned 1 [0171.351] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 158 [0171.353] CloseHandle (hObject=0xa4) returned 1 [0171.354] AreFileApisANSI () returned 1 [0171.354] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ecc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0171.357] CloseHandle (hObject=0xa4) returned 1 [0171.357] AreFileApisANSI () returned 1 [0171.358] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ebe0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 158 [0171.359] CloseHandle (hObject=0xa4) returned 1 [0171.359] AreFileApisANSI () returned 1 [0171.360] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 174 [0171.373] CloseHandle (hObject=0xa8) returned 1 [0171.374] AreFileApisANSI () returned 1 [0171.374] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0171.375] CloseHandle (hObject=0xa8) returned 1 [0171.375] AreFileApisANSI () returned 1 [0171.376] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 174 [0171.377] CloseHandle (hObject=0xa8) returned 1 [0171.377] AreFileApisANSI () returned 1 [0171.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 173 [0171.409] CloseHandle (hObject=0xac) returned 1 [0171.410] AreFileApisANSI () returned 1 [0171.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 173 [0171.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf140, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 182 [0171.410] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0171.411] AreFileApisANSI () returned 1 [0171.411] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0171.413] CloseHandle (hObject=0xa4) returned 1 [0171.413] AreFileApisANSI () returned 1 [0171.413] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0171.415] CloseHandle (hObject=0xa4) returned 1 [0171.415] AreFileApisANSI () returned 1 [0171.415] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0171.429] CloseHandle (hObject=0xa4) returned 1 [0171.429] AreFileApisANSI () returned 1 [0171.429] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0171.430] CloseHandle (hObject=0xa4) returned 1 [0171.431] AreFileApisANSI () returned 1 [0171.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0171.433] CloseHandle (hObject=0xa4) returned 1 [0171.434] AreFileApisANSI () returned 1 [0171.434] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0171.435] CloseHandle (hObject=0xa4) returned 1 [0171.436] AreFileApisANSI () returned 1 [0171.436] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0171.446] CloseHandle (hObject=0xa8) returned 1 [0171.446] AreFileApisANSI () returned 1 [0171.446] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0171.446] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0171.446] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0171.448] AreFileApisANSI () returned 1 [0171.448] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0171.449] CloseHandle (hObject=0xa4) returned 1 [0171.450] AreFileApisANSI () returned 1 [0171.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0171.451] CloseHandle (hObject=0xa4) returned 1 [0171.451] AreFileApisANSI () returned 1 [0171.451] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0171.454] CloseHandle (hObject=0xa4) returned 1 [0171.454] AreFileApisANSI () returned 1 [0171.454] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0171.455] CloseHandle (hObject=0xa4) returned 1 [0171.456] AreFileApisANSI () returned 1 [0171.456] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0171.457] CloseHandle (hObject=0xa4) returned 1 [0171.457] AreFileApisANSI () returned 1 [0171.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0171.466] CloseHandle (hObject=0xa4) returned 1 [0171.467] AreFileApisANSI () returned 1 [0171.467] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0171.470] CloseHandle (hObject=0xa0) returned 1 [0171.471] AreFileApisANSI () returned 1 [0171.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0171.472] CloseHandle (hObject=0xa0) returned 1 [0171.472] AreFileApisANSI () returned 1 [0171.472] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0171.473] CloseHandle (hObject=0xa0) returned 1 [0171.474] AreFileApisANSI () returned 1 [0171.474] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0171.490] CloseHandle (hObject=0xa4) returned 1 [0171.490] AreFileApisANSI () returned 1 [0171.490] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0171.491] CloseHandle (hObject=0xa4) returned 1 [0171.492] AreFileApisANSI () returned 1 [0171.492] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0171.493] CloseHandle (hObject=0xa4) returned 1 [0171.493] AreFileApisANSI () returned 1 [0171.493] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0171.495] CloseHandle (hObject=0xa8) returned 1 [0171.495] AreFileApisANSI () returned 1 [0171.495] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0171.496] CloseHandle (hObject=0xa8) returned 1 [0171.496] AreFileApisANSI () returned 1 [0171.496] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0171.510] CloseHandle (hObject=0xa8) returned 1 [0171.510] AreFileApisANSI () returned 1 [0171.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0171.513] CloseHandle (hObject=0xa8) returned 1 [0171.513] AreFileApisANSI () returned 1 [0171.513] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0171.514] CloseHandle (hObject=0xa8) returned 1 [0171.515] AreFileApisANSI () returned 1 [0171.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0171.517] CloseHandle (hObject=0xa8) returned 1 [0171.517] AreFileApisANSI () returned 1 [0171.517] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0171.518] CloseHandle (hObject=0xa8) returned 1 [0171.519] AreFileApisANSI () returned 1 [0171.519] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0171.519] CloseHandle (hObject=0xa8) returned 1 [0171.520] AreFileApisANSI () returned 1 [0171.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0171.522] CloseHandle (hObject=0xa8) returned 1 [0171.522] AreFileApisANSI () returned 1 [0171.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0171.523] CloseHandle (hObject=0xa8) returned 1 [0171.524] AreFileApisANSI () returned 1 [0171.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0171.525] CloseHandle (hObject=0xa8) returned 1 [0171.525] AreFileApisANSI () returned 1 [0171.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0171.537] CloseHandle (hObject=0xa8) returned 1 [0171.538] AreFileApisANSI () returned 1 [0171.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0171.539] CloseHandle (hObject=0xa4) returned 1 [0171.539] AreFileApisANSI () returned 1 [0171.539] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0171.540] CloseHandle (hObject=0xa4) returned 1 [0171.541] AreFileApisANSI () returned 1 [0171.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0171.543] CloseHandle (hObject=0xa4) returned 1 [0171.544] AreFileApisANSI () returned 1 [0171.544] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0171.553] CloseHandle (hObject=0xa4) returned 1 [0171.554] AreFileApisANSI () returned 1 [0171.554] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0171.555] CloseHandle (hObject=0xa4) returned 1 [0171.555] AreFileApisANSI () returned 1 [0171.555] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0171.557] CloseHandle (hObject=0xa4) returned 1 [0171.558] AreFileApisANSI () returned 1 [0171.558] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0171.559] CloseHandle (hObject=0xa4) returned 1 [0171.560] AreFileApisANSI () returned 1 [0171.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0171.561] CloseHandle (hObject=0xa4) returned 1 [0171.561] AreFileApisANSI () returned 1 [0171.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0171.570] CloseHandle (hObject=0xa4) returned 1 [0171.570] AreFileApisANSI () returned 1 [0171.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0171.572] CloseHandle (hObject=0xa4) returned 1 [0171.572] AreFileApisANSI () returned 1 [0171.572] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ecc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0171.575] CloseHandle (hObject=0xa4) returned 1 [0171.575] AreFileApisANSI () returned 1 [0171.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e5c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0171.576] CloseHandle (hObject=0xa4) returned 1 [0171.577] AreFileApisANSI () returned 1 [0171.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 170 [0171.585] CloseHandle (hObject=0xa8) returned 1 [0171.586] AreFileApisANSI () returned 1 [0171.586] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0171.587] CloseHandle (hObject=0xa8) returned 1 [0171.587] AreFileApisANSI () returned 1 [0171.587] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 170 [0171.588] CloseHandle (hObject=0xa8) returned 1 [0171.588] AreFileApisANSI () returned 1 [0171.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0171.633] CloseHandle (hObject=0xac) returned 1 [0171.633] AreFileApisANSI () returned 1 [0171.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0171.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bed58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 178 [0171.633] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0171.635] AreFileApisANSI () returned 1 [0171.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0171.636] CloseHandle (hObject=0xa4) returned 1 [0171.637] AreFileApisANSI () returned 1 [0171.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0171.638] CloseHandle (hObject=0xa4) returned 1 [0171.638] AreFileApisANSI () returned 1 [0171.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0171.640] CloseHandle (hObject=0xa4) returned 1 [0171.641] AreFileApisANSI () returned 1 [0171.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0171.642] CloseHandle (hObject=0xa4) returned 1 [0171.643] AreFileApisANSI () returned 1 [0171.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0171.653] CloseHandle (hObject=0xa4) returned 1 [0171.654] AreFileApisANSI () returned 1 [0171.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0171.655] CloseHandle (hObject=0xa4) returned 1 [0171.655] AreFileApisANSI () returned 1 [0171.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0171.666] CloseHandle (hObject=0xa8) returned 1 [0171.666] AreFileApisANSI () returned 1 [0171.666] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0171.666] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a31c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0171.666] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0171.668] AreFileApisANSI () returned 1 [0171.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0171.669] CloseHandle (hObject=0xa4) returned 1 [0171.669] AreFileApisANSI () returned 1 [0171.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0171.670] CloseHandle (hObject=0xa4) returned 1 [0171.670] AreFileApisANSI () returned 1 [0171.670] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0171.673] CloseHandle (hObject=0xa4) returned 1 [0171.674] AreFileApisANSI () returned 1 [0171.674] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0171.675] CloseHandle (hObject=0xa4) returned 1 [0171.675] AreFileApisANSI () returned 1 [0171.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0171.676] CloseHandle (hObject=0xa4) returned 1 [0171.677] AreFileApisANSI () returned 1 [0171.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0171.684] CloseHandle (hObject=0xa4) returned 1 [0171.685] AreFileApisANSI () returned 1 [0171.685] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0171.698] CloseHandle (hObject=0xa0) returned 1 [0171.698] AreFileApisANSI () returned 1 [0171.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0171.699] CloseHandle (hObject=0xa0) returned 1 [0171.700] AreFileApisANSI () returned 1 [0171.700] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4988a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0171.701] CloseHandle (hObject=0xa0) returned 1 [0171.701] AreFileApisANSI () returned 1 [0171.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0171.727] CloseHandle (hObject=0xa4) returned 1 [0171.728] AreFileApisANSI () returned 1 [0171.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0171.729] CloseHandle (hObject=0xa4) returned 1 [0171.729] AreFileApisANSI () returned 1 [0171.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0171.731] CloseHandle (hObject=0xa4) returned 1 [0171.731] AreFileApisANSI () returned 1 [0171.731] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0171.733] CloseHandle (hObject=0xa8) returned 1 [0171.733] AreFileApisANSI () returned 1 [0171.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0171.735] CloseHandle (hObject=0xa8) returned 1 [0171.735] AreFileApisANSI () returned 1 [0171.735] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0171.747] CloseHandle (hObject=0xa8) returned 1 [0171.747] AreFileApisANSI () returned 1 [0171.747] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0171.748] CloseHandle (hObject=0xa8) returned 1 [0171.749] AreFileApisANSI () returned 1 [0171.749] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0171.750] CloseHandle (hObject=0xa8) returned 1 [0171.750] AreFileApisANSI () returned 1 [0171.750] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0171.763] CloseHandle (hObject=0xa8) returned 1 [0171.764] AreFileApisANSI () returned 1 [0171.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0171.765] CloseHandle (hObject=0xa8) returned 1 [0171.765] AreFileApisANSI () returned 1 [0171.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0171.766] CloseHandle (hObject=0xa8) returned 1 [0171.767] AreFileApisANSI () returned 1 [0171.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0171.769] CloseHandle (hObject=0xa8) returned 1 [0171.770] AreFileApisANSI () returned 1 [0171.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0171.773] CloseHandle (hObject=0xa8) returned 1 [0171.773] AreFileApisANSI () returned 1 [0171.773] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0171.775] CloseHandle (hObject=0xa8) returned 1 [0171.775] AreFileApisANSI () returned 1 [0171.775] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0171.778] CloseHandle (hObject=0xa8) returned 1 [0171.779] AreFileApisANSI () returned 1 [0171.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0171.780] CloseHandle (hObject=0xa4) returned 1 [0171.780] AreFileApisANSI () returned 1 [0171.780] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0171.782] CloseHandle (hObject=0xa4) returned 1 [0171.782] AreFileApisANSI () returned 1 [0171.782] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0171.791] CloseHandle (hObject=0xa4) returned 1 [0171.792] AreFileApisANSI () returned 1 [0171.792] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0171.794] CloseHandle (hObject=0xa4) returned 1 [0171.794] AreFileApisANSI () returned 1 [0171.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0171.796] CloseHandle (hObject=0xa4) returned 1 [0171.796] AreFileApisANSI () returned 1 [0171.796] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0171.799] CloseHandle (hObject=0xa4) returned 1 [0171.800] AreFileApisANSI () returned 1 [0171.800] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0171.801] CloseHandle (hObject=0xa4) returned 1 [0171.801] AreFileApisANSI () returned 1 [0171.801] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0171.802] CloseHandle (hObject=0xa4) returned 1 [0171.803] AreFileApisANSI () returned 1 [0171.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0171.806] CloseHandle (hObject=0xa4) returned 1 [0171.806] AreFileApisANSI () returned 1 [0171.806] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0171.810] CloseHandle (hObject=0xa4) returned 1 [0171.811] AreFileApisANSI () returned 1 [0171.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfaa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 145 [0171.819] CloseHandle (hObject=0xa4) returned 1 [0171.820] AreFileApisANSI () returned 1 [0171.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfaa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0171.821] CloseHandle (hObject=0xa4) returned 1 [0171.822] AreFileApisANSI () returned 1 [0171.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0171.837] CloseHandle (hObject=0xa8) returned 1 [0171.837] AreFileApisANSI () returned 1 [0171.837] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0171.839] CloseHandle (hObject=0xa8) returned 1 [0171.840] AreFileApisANSI () returned 1 [0171.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0171.841] CloseHandle (hObject=0xa8) returned 1 [0171.841] AreFileApisANSI () returned 1 [0171.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 163 [0171.903] CloseHandle (hObject=0xac) returned 1 [0171.904] AreFileApisANSI () returned 1 [0171.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 163 [0171.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0ab0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 172 [0171.904] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0171.905] AreFileApisANSI () returned 1 [0171.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0171.907] CloseHandle (hObject=0xa4) returned 1 [0171.907] AreFileApisANSI () returned 1 [0171.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0171.909] CloseHandle (hObject=0xa4) returned 1 [0171.909] AreFileApisANSI () returned 1 [0171.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0171.912] CloseHandle (hObject=0xa4) returned 1 [0171.913] AreFileApisANSI () returned 1 [0171.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0171.914] CloseHandle (hObject=0xa4) returned 1 [0171.914] AreFileApisANSI () returned 1 [0171.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0171.917] CloseHandle (hObject=0xa4) returned 1 [0171.917] AreFileApisANSI () returned 1 [0171.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0171.918] CloseHandle (hObject=0xa4) returned 1 [0171.919] AreFileApisANSI () returned 1 [0171.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0171.940] CloseHandle (hObject=0xa8) returned 1 [0171.940] AreFileApisANSI () returned 1 [0171.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0171.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0171.940] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0171.941] AreFileApisANSI () returned 1 [0171.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0171.942] CloseHandle (hObject=0xa4) returned 1 [0171.942] AreFileApisANSI () returned 1 [0171.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0171.943] CloseHandle (hObject=0xa4) returned 1 [0171.944] AreFileApisANSI () returned 1 [0171.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0171.946] CloseHandle (hObject=0xa4) returned 1 [0171.947] AreFileApisANSI () returned 1 [0171.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0171.948] CloseHandle (hObject=0xa4) returned 1 [0171.948] AreFileApisANSI () returned 1 [0171.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0171.949] CloseHandle (hObject=0xa4) returned 1 [0171.950] AreFileApisANSI () returned 1 [0171.950] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0171.952] CloseHandle (hObject=0xa4) returned 1 [0171.953] AreFileApisANSI () returned 1 [0171.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0171.971] CloseHandle (hObject=0xa0) returned 1 [0171.972] AreFileApisANSI () returned 1 [0171.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0171.973] CloseHandle (hObject=0xa0) returned 1 [0171.974] AreFileApisANSI () returned 1 [0171.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0171.975] CloseHandle (hObject=0xa0) returned 1 [0171.975] AreFileApisANSI () returned 1 [0171.976] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0172.001] CloseHandle (hObject=0xa4) returned 1 [0172.001] AreFileApisANSI () returned 1 [0172.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0172.003] CloseHandle (hObject=0xa4) returned 1 [0172.005] AreFileApisANSI () returned 1 [0172.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0172.006] CloseHandle (hObject=0xa4) returned 1 [0172.006] AreFileApisANSI () returned 1 [0172.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0172.008] CloseHandle (hObject=0xa8) returned 1 [0172.009] AreFileApisANSI () returned 1 [0172.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0172.011] CloseHandle (hObject=0xa8) returned 1 [0172.012] AreFileApisANSI () returned 1 [0172.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0172.025] CloseHandle (hObject=0xa8) returned 1 [0172.026] AreFileApisANSI () returned 1 [0172.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0172.028] CloseHandle (hObject=0xa8) returned 1 [0172.029] AreFileApisANSI () returned 1 [0172.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0172.031] CloseHandle (hObject=0xa8) returned 1 [0172.031] AreFileApisANSI () returned 1 [0172.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0172.034] CloseHandle (hObject=0xa8) returned 1 [0172.035] AreFileApisANSI () returned 1 [0172.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0172.037] CloseHandle (hObject=0xa8) returned 1 [0172.037] AreFileApisANSI () returned 1 [0172.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0172.039] CloseHandle (hObject=0xa8) returned 1 [0172.039] AreFileApisANSI () returned 1 [0172.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0172.049] CloseHandle (hObject=0xa8) returned 1 [0172.050] AreFileApisANSI () returned 1 [0172.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0172.051] CloseHandle (hObject=0xa8) returned 1 [0172.052] AreFileApisANSI () returned 1 [0172.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0172.053] CloseHandle (hObject=0xa8) returned 1 [0172.054] AreFileApisANSI () returned 1 [0172.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0172.057] CloseHandle (hObject=0xa8) returned 1 [0172.059] AreFileApisANSI () returned 1 [0172.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0172.060] CloseHandle (hObject=0xa4) returned 1 [0172.061] AreFileApisANSI () returned 1 [0172.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0172.062] CloseHandle (hObject=0xa4) returned 1 [0172.063] AreFileApisANSI () returned 1 [0172.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0172.066] CloseHandle (hObject=0xa4) returned 1 [0172.067] AreFileApisANSI () returned 1 [0172.067] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.069] CloseHandle (hObject=0xa4) returned 1 [0172.070] AreFileApisANSI () returned 1 [0172.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0172.071] CloseHandle (hObject=0xa4) returned 1 [0172.072] AreFileApisANSI () returned 1 [0172.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.085] CloseHandle (hObject=0xa4) returned 1 [0172.086] AreFileApisANSI () returned 1 [0172.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.087] CloseHandle (hObject=0xa4) returned 1 [0172.088] AreFileApisANSI () returned 1 [0172.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0172.091] CloseHandle (hObject=0xa4) returned 1 [0172.092] AreFileApisANSI () returned 1 [0172.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.095] CloseHandle (hObject=0xa4) returned 1 [0172.096] AreFileApisANSI () returned 1 [0172.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f200, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0172.098] CloseHandle (hObject=0xa4) returned 1 [0172.099] AreFileApisANSI () returned 1 [0172.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0172.102] CloseHandle (hObject=0xa4) returned 1 [0172.103] AreFileApisANSI () returned 1 [0172.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0172.105] CloseHandle (hObject=0xa4) returned 1 [0172.105] AreFileApisANSI () returned 1 [0172.105] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 168 [0172.110] CloseHandle (hObject=0xa8) returned 1 [0172.111] AreFileApisANSI () returned 1 [0172.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 165 [0172.112] CloseHandle (hObject=0xa8) returned 1 [0172.113] AreFileApisANSI () returned 1 [0172.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 168 [0172.114] CloseHandle (hObject=0xa8) returned 1 [0172.115] AreFileApisANSI () returned 1 [0172.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0172.171] CloseHandle (hObject=0xac) returned 1 [0172.172] AreFileApisANSI () returned 1 [0172.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0172.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0b68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 176 [0172.172] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0172.173] AreFileApisANSI () returned 1 [0172.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0172.181] CloseHandle (hObject=0xa4) returned 1 [0172.181] AreFileApisANSI () returned 1 [0172.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0172.184] CloseHandle (hObject=0xa4) returned 1 [0172.185] AreFileApisANSI () returned 1 [0172.185] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0172.198] CloseHandle (hObject=0xa4) returned 1 [0172.199] AreFileApisANSI () returned 1 [0172.199] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0172.201] CloseHandle (hObject=0xa4) returned 1 [0172.202] AreFileApisANSI () returned 1 [0172.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0172.205] CloseHandle (hObject=0xa4) returned 1 [0172.205] AreFileApisANSI () returned 1 [0172.205] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0172.207] CloseHandle (hObject=0xa4) returned 1 [0172.207] AreFileApisANSI () returned 1 [0172.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0172.233] CloseHandle (hObject=0xa8) returned 1 [0172.233] AreFileApisANSI () returned 1 [0172.233] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0172.233] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5590, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0172.234] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0172.237] AreFileApisANSI () returned 1 [0172.237] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0172.238] CloseHandle (hObject=0xa4) returned 1 [0172.238] AreFileApisANSI () returned 1 [0172.238] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.240] CloseHandle (hObject=0xa4) returned 1 [0172.240] AreFileApisANSI () returned 1 [0172.240] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0172.252] CloseHandle (hObject=0xa4) returned 1 [0172.253] AreFileApisANSI () returned 1 [0172.253] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0172.254] CloseHandle (hObject=0xa4) returned 1 [0172.254] AreFileApisANSI () returned 1 [0172.254] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0172.256] CloseHandle (hObject=0xa4) returned 1 [0172.256] AreFileApisANSI () returned 1 [0172.256] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0172.259] CloseHandle (hObject=0xa4) returned 1 [0172.260] AreFileApisANSI () returned 1 [0172.260] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0172.275] CloseHandle (hObject=0xa0) returned 1 [0172.276] AreFileApisANSI () returned 1 [0172.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0172.278] CloseHandle (hObject=0xa0) returned 1 [0172.279] AreFileApisANSI () returned 1 [0172.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0172.280] CloseHandle (hObject=0xa0) returned 1 [0172.280] AreFileApisANSI () returned 1 [0172.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0172.299] CloseHandle (hObject=0xa4) returned 1 [0172.300] AreFileApisANSI () returned 1 [0172.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0172.301] CloseHandle (hObject=0xa4) returned 1 [0172.302] AreFileApisANSI () returned 1 [0172.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0172.308] CloseHandle (hObject=0xa4) returned 1 [0172.309] AreFileApisANSI () returned 1 [0172.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0172.312] CloseHandle (hObject=0xa8) returned 1 [0172.312] AreFileApisANSI () returned 1 [0172.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.314] CloseHandle (hObject=0xa8) returned 1 [0172.314] AreFileApisANSI () returned 1 [0172.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0172.323] CloseHandle (hObject=0xa8) returned 1 [0172.345] AreFileApisANSI () returned 1 [0172.345] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0172.347] CloseHandle (hObject=0xa8) returned 1 [0172.347] AreFileApisANSI () returned 1 [0172.347] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0172.349] CloseHandle (hObject=0xa8) returned 1 [0172.349] AreFileApisANSI () returned 1 [0172.349] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0172.352] CloseHandle (hObject=0xa8) returned 1 [0172.353] AreFileApisANSI () returned 1 [0172.353] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0172.354] CloseHandle (hObject=0xa8) returned 1 [0172.355] AreFileApisANSI () returned 1 [0172.355] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0172.357] CloseHandle (hObject=0xa8) returned 1 [0172.357] AreFileApisANSI () returned 1 [0172.357] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0172.360] CloseHandle (hObject=0xa8) returned 1 [0172.361] AreFileApisANSI () returned 1 [0172.361] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0172.362] CloseHandle (hObject=0xa8) returned 1 [0172.363] AreFileApisANSI () returned 1 [0172.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0172.364] CloseHandle (hObject=0xa8) returned 1 [0172.365] AreFileApisANSI () returned 1 [0172.365] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0172.376] CloseHandle (hObject=0xa8) returned 1 [0172.377] AreFileApisANSI () returned 1 [0172.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0172.379] CloseHandle (hObject=0xa4) returned 1 [0172.379] AreFileApisANSI () returned 1 [0172.379] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0172.381] CloseHandle (hObject=0xa4) returned 1 [0172.381] AreFileApisANSI () returned 1 [0172.381] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0172.384] CloseHandle (hObject=0xa4) returned 1 [0172.385] AreFileApisANSI () returned 1 [0172.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0172.387] CloseHandle (hObject=0xa4) returned 1 [0172.388] AreFileApisANSI () returned 1 [0172.388] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0172.389] CloseHandle (hObject=0xa4) returned 1 [0172.389] AreFileApisANSI () returned 1 [0172.389] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0172.392] CloseHandle (hObject=0xa4) returned 1 [0172.392] AreFileApisANSI () returned 1 [0172.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0172.394] CloseHandle (hObject=0xa4) returned 1 [0172.394] AreFileApisANSI () returned 1 [0172.394] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0172.395] CloseHandle (hObject=0xa4) returned 1 [0172.395] AreFileApisANSI () returned 1 [0172.395] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0172.410] CloseHandle (hObject=0xa4) returned 1 [0172.411] AreFileApisANSI () returned 1 [0172.411] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ea20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0172.412] CloseHandle (hObject=0xa4) returned 1 [0172.412] AreFileApisANSI () returned 1 [0172.412] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0172.415] CloseHandle (hObject=0xa4) returned 1 [0172.415] AreFileApisANSI () returned 1 [0172.415] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ee80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0172.417] CloseHandle (hObject=0xa4) returned 1 [0172.420] AreFileApisANSI () returned 1 [0172.420] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 170 [0172.432] CloseHandle (hObject=0xa8) returned 1 [0172.433] AreFileApisANSI () returned 1 [0172.433] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0172.435] CloseHandle (hObject=0xa8) returned 1 [0172.435] AreFileApisANSI () returned 1 [0172.435] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 170 [0172.437] CloseHandle (hObject=0xa8) returned 1 [0172.438] AreFileApisANSI () returned 1 [0172.438] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0172.485] CloseHandle (hObject=0xac) returned 1 [0172.486] AreFileApisANSI () returned 1 [0172.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0172.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfc30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 178 [0172.486] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0172.487] AreFileApisANSI () returned 1 [0172.487] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0172.488] CloseHandle (hObject=0xa4) returned 1 [0172.488] AreFileApisANSI () returned 1 [0172.488] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.489] CloseHandle (hObject=0xa4) returned 1 [0172.489] AreFileApisANSI () returned 1 [0172.489] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0172.503] CloseHandle (hObject=0xa4) returned 1 [0172.504] AreFileApisANSI () returned 1 [0172.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0172.505] CloseHandle (hObject=0xa4) returned 1 [0172.505] AreFileApisANSI () returned 1 [0172.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0172.508] CloseHandle (hObject=0xa4) returned 1 [0172.508] AreFileApisANSI () returned 1 [0172.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0172.509] CloseHandle (hObject=0xa4) returned 1 [0172.510] AreFileApisANSI () returned 1 [0172.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0172.523] CloseHandle (hObject=0xa8) returned 1 [0172.524] AreFileApisANSI () returned 1 [0172.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0172.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2720, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.524] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0172.525] AreFileApisANSI () returned 1 [0172.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0172.528] CloseHandle (hObject=0xa4) returned 1 [0172.528] AreFileApisANSI () returned 1 [0172.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0172.529] CloseHandle (hObject=0xa4) returned 1 [0172.530] AreFileApisANSI () returned 1 [0172.530] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0172.532] CloseHandle (hObject=0xa4) returned 1 [0172.532] AreFileApisANSI () returned 1 [0172.532] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.533] CloseHandle (hObject=0xa4) returned 1 [0172.534] AreFileApisANSI () returned 1 [0172.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0172.535] CloseHandle (hObject=0xa4) returned 1 [0172.535] AreFileApisANSI () returned 1 [0172.535] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.548] CloseHandle (hObject=0xa4) returned 1 [0172.548] AreFileApisANSI () returned 1 [0172.548] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0172.557] CloseHandle (hObject=0xa0) returned 1 [0172.559] AreFileApisANSI () returned 1 [0172.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0172.561] CloseHandle (hObject=0xa0) returned 1 [0172.561] AreFileApisANSI () returned 1 [0172.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0172.562] CloseHandle (hObject=0xa0) returned 1 [0172.563] AreFileApisANSI () returned 1 [0172.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0172.572] CloseHandle (hObject=0xa4) returned 1 [0172.572] AreFileApisANSI () returned 1 [0172.572] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0172.573] CloseHandle (hObject=0xa4) returned 1 [0172.574] AreFileApisANSI () returned 1 [0172.574] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0172.576] CloseHandle (hObject=0xa4) returned 1 [0172.577] AreFileApisANSI () returned 1 [0172.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0172.578] CloseHandle (hObject=0xa8) returned 1 [0172.579] AreFileApisANSI () returned 1 [0172.579] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0172.580] CloseHandle (hObject=0xa8) returned 1 [0172.580] AreFileApisANSI () returned 1 [0172.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0172.593] CloseHandle (hObject=0xa8) returned 1 [0172.594] AreFileApisANSI () returned 1 [0172.594] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0172.595] CloseHandle (hObject=0xa8) returned 1 [0172.595] AreFileApisANSI () returned 1 [0172.595] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0172.596] CloseHandle (hObject=0xa8) returned 1 [0172.597] AreFileApisANSI () returned 1 [0172.597] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0172.599] CloseHandle (hObject=0xa8) returned 1 [0172.599] AreFileApisANSI () returned 1 [0172.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0172.600] CloseHandle (hObject=0xa8) returned 1 [0172.600] AreFileApisANSI () returned 1 [0172.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0172.602] CloseHandle (hObject=0xa8) returned 1 [0172.602] AreFileApisANSI () returned 1 [0172.602] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0172.604] CloseHandle (hObject=0xa8) returned 1 [0172.604] AreFileApisANSI () returned 1 [0172.604] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.606] CloseHandle (hObject=0xa8) returned 1 [0172.606] AreFileApisANSI () returned 1 [0172.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0172.607] CloseHandle (hObject=0xa8) returned 1 [0172.608] AreFileApisANSI () returned 1 [0172.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.619] CloseHandle (hObject=0xa8) returned 1 [0172.619] AreFileApisANSI () returned 1 [0172.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.621] CloseHandle (hObject=0xa4) returned 1 [0172.622] AreFileApisANSI () returned 1 [0172.622] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0172.623] CloseHandle (hObject=0xa4) returned 1 [0172.623] AreFileApisANSI () returned 1 [0172.623] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.626] CloseHandle (hObject=0xa4) returned 1 [0172.626] AreFileApisANSI () returned 1 [0172.626] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0172.627] CloseHandle (hObject=0xa4) returned 1 [0172.627] AreFileApisANSI () returned 1 [0172.627] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.630] CloseHandle (hObject=0xa4) returned 1 [0172.630] AreFileApisANSI () returned 1 [0172.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0172.632] CloseHandle (hObject=0xa4) returned 1 [0172.633] AreFileApisANSI () returned 1 [0172.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0172.634] CloseHandle (hObject=0xa4) returned 1 [0172.634] AreFileApisANSI () returned 1 [0172.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.636] CloseHandle (hObject=0xa4) returned 1 [0172.636] AreFileApisANSI () returned 1 [0172.636] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0172.648] CloseHandle (hObject=0xa4) returned 1 [0172.648] AreFileApisANSI () returned 1 [0172.648] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0172.651] CloseHandle (hObject=0xa4) returned 1 [0172.651] AreFileApisANSI () returned 1 [0172.651] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0172.653] CloseHandle (hObject=0xa4) returned 1 [0172.653] AreFileApisANSI () returned 1 [0172.653] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0172.654] CloseHandle (hObject=0xa4) returned 1 [0172.655] AreFileApisANSI () returned 1 [0172.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 185 [0172.663] CloseHandle (hObject=0xa8) returned 1 [0172.664] AreFileApisANSI () returned 1 [0172.664] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4962a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 182 [0172.665] CloseHandle (hObject=0xa8) returned 1 [0172.666] AreFileApisANSI () returned 1 [0172.666] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4963b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 185 [0172.667] CloseHandle (hObject=0xa8) returned 1 [0172.667] AreFileApisANSI () returned 1 [0172.667] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 184 [0172.687] CloseHandle (hObject=0xac) returned 1 [0172.688] AreFileApisANSI () returned 1 [0172.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 184 [0172.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 193 [0172.688] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0172.690] AreFileApisANSI () returned 1 [0172.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0172.691] CloseHandle (hObject=0xa4) returned 1 [0172.691] AreFileApisANSI () returned 1 [0172.691] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0172.693] CloseHandle (hObject=0xa4) returned 1 [0172.693] AreFileApisANSI () returned 1 [0172.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0172.701] CloseHandle (hObject=0xa4) returned 1 [0172.702] AreFileApisANSI () returned 1 [0172.702] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0172.718] CloseHandle (hObject=0xa4) returned 1 [0172.718] AreFileApisANSI () returned 1 [0172.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0172.720] CloseHandle (hObject=0xa4) returned 1 [0172.720] AreFileApisANSI () returned 1 [0172.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0172.721] CloseHandle (hObject=0xa4) returned 1 [0172.722] AreFileApisANSI () returned 1 [0172.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0172.739] CloseHandle (hObject=0xa8) returned 1 [0172.740] AreFileApisANSI () returned 1 [0172.740] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0172.740] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2610, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0172.740] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0172.741] AreFileApisANSI () returned 1 [0172.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0172.742] CloseHandle (hObject=0xa4) returned 1 [0172.743] AreFileApisANSI () returned 1 [0172.743] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0172.744] CloseHandle (hObject=0xa4) returned 1 [0172.744] AreFileApisANSI () returned 1 [0172.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0172.747] CloseHandle (hObject=0xa4) returned 1 [0172.748] AreFileApisANSI () returned 1 [0172.748] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0172.749] CloseHandle (hObject=0xa4) returned 1 [0172.750] AreFileApisANSI () returned 1 [0172.750] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0172.751] CloseHandle (hObject=0xa4) returned 1 [0172.751] AreFileApisANSI () returned 1 [0172.751] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0172.763] CloseHandle (hObject=0xa4) returned 1 [0172.763] AreFileApisANSI () returned 1 [0172.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0172.770] CloseHandle (hObject=0xa0) returned 1 [0172.770] AreFileApisANSI () returned 1 [0172.771] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0172.772] CloseHandle (hObject=0xa0) returned 1 [0172.773] AreFileApisANSI () returned 1 [0172.773] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0172.774] CloseHandle (hObject=0xa0) returned 1 [0172.774] AreFileApisANSI () returned 1 [0172.774] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0172.805] CloseHandle (hObject=0xa4) returned 1 [0172.805] AreFileApisANSI () returned 1 [0172.805] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0172.806] CloseHandle (hObject=0xa4) returned 1 [0172.806] AreFileApisANSI () returned 1 [0172.806] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0172.807] CloseHandle (hObject=0xa4) returned 1 [0172.808] AreFileApisANSI () returned 1 [0172.808] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0172.809] CloseHandle (hObject=0xa8) returned 1 [0172.810] AreFileApisANSI () returned 1 [0172.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0172.811] CloseHandle (hObject=0xa8) returned 1 [0172.811] AreFileApisANSI () returned 1 [0172.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0172.813] CloseHandle (hObject=0xa8) returned 1 [0172.814] AreFileApisANSI () returned 1 [0172.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0172.815] CloseHandle (hObject=0xa8) returned 1 [0172.815] AreFileApisANSI () returned 1 [0172.815] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0172.816] CloseHandle (hObject=0xa8) returned 1 [0172.816] AreFileApisANSI () returned 1 [0172.816] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0172.819] CloseHandle (hObject=0xa8) returned 1 [0172.820] AreFileApisANSI () returned 1 [0172.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0172.821] CloseHandle (hObject=0xa8) returned 1 [0172.822] AreFileApisANSI () returned 1 [0172.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0172.823] CloseHandle (hObject=0xa8) returned 1 [0172.824] AreFileApisANSI () returned 1 [0172.824] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0172.827] CloseHandle (hObject=0xa8) returned 1 [0172.827] AreFileApisANSI () returned 1 [0172.827] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0172.829] CloseHandle (hObject=0xa8) returned 1 [0172.829] AreFileApisANSI () returned 1 [0172.829] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0172.830] CloseHandle (hObject=0xa8) returned 1 [0172.831] AreFileApisANSI () returned 1 [0172.831] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0172.834] CloseHandle (hObject=0xa8) returned 1 [0172.834] AreFileApisANSI () returned 1 [0172.834] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0172.836] CloseHandle (hObject=0xa4) returned 1 [0172.836] AreFileApisANSI () returned 1 [0172.836] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0172.837] CloseHandle (hObject=0xa4) returned 1 [0172.838] AreFileApisANSI () returned 1 [0172.838] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0172.841] CloseHandle (hObject=0xa4) returned 1 [0172.842] AreFileApisANSI () returned 1 [0172.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.854] CloseHandle (hObject=0xa4) returned 1 [0172.854] AreFileApisANSI () returned 1 [0172.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0172.856] CloseHandle (hObject=0xa4) returned 1 [0172.857] AreFileApisANSI () returned 1 [0172.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.860] CloseHandle (hObject=0xa4) returned 1 [0172.862] AreFileApisANSI () returned 1 [0172.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.863] CloseHandle (hObject=0xa4) returned 1 [0172.864] AreFileApisANSI () returned 1 [0172.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0172.865] CloseHandle (hObject=0xa4) returned 1 [0172.865] AreFileApisANSI () returned 1 [0172.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.868] CloseHandle (hObject=0xa4) returned 1 [0172.868] AreFileApisANSI () returned 1 [0172.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0172.870] CloseHandle (hObject=0xa4) returned 1 [0172.871] AreFileApisANSI () returned 1 [0172.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ee80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 147 [0172.879] CloseHandle (hObject=0xa4) returned 1 [0172.880] AreFileApisANSI () returned 1 [0172.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0172.881] CloseHandle (hObject=0xa4) returned 1 [0172.882] AreFileApisANSI () returned 1 [0172.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0172.906] CloseHandle (hObject=0xa8) returned 1 [0172.907] AreFileApisANSI () returned 1 [0172.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 163 [0172.908] CloseHandle (hObject=0xa8) returned 1 [0172.908] AreFileApisANSI () returned 1 [0172.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0172.909] CloseHandle (hObject=0xa8) returned 1 [0172.910] AreFileApisANSI () returned 1 [0172.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 165 [0172.929] CloseHandle (hObject=0xac) returned 1 [0172.930] AreFileApisANSI () returned 1 [0172.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 165 [0172.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a09f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 174 [0172.930] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0172.931] AreFileApisANSI () returned 1 [0172.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0172.932] CloseHandle (hObject=0xa4) returned 1 [0172.932] AreFileApisANSI () returned 1 [0172.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0172.934] CloseHandle (hObject=0xa4) returned 1 [0172.935] AreFileApisANSI () returned 1 [0172.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0172.937] CloseHandle (hObject=0xa4) returned 1 [0172.937] AreFileApisANSI () returned 1 [0172.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0172.939] CloseHandle (hObject=0xa4) returned 1 [0172.939] AreFileApisANSI () returned 1 [0172.939] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0172.941] CloseHandle (hObject=0xa4) returned 1 [0172.941] AreFileApisANSI () returned 1 [0172.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0172.942] CloseHandle (hObject=0xa4) returned 1 [0172.943] AreFileApisANSI () returned 1 [0172.943] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0172.953] CloseHandle (hObject=0xa8) returned 1 [0172.953] AreFileApisANSI () returned 1 [0172.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0172.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0172.954] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0172.955] AreFileApisANSI () returned 1 [0172.955] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0172.956] CloseHandle (hObject=0xa4) returned 1 [0172.957] AreFileApisANSI () returned 1 [0172.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0172.958] CloseHandle (hObject=0xa4) returned 1 [0172.958] AreFileApisANSI () returned 1 [0172.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0172.974] CloseHandle (hObject=0xa4) returned 1 [0172.975] AreFileApisANSI () returned 1 [0172.975] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0172.978] CloseHandle (hObject=0xa4) returned 1 [0172.978] AreFileApisANSI () returned 1 [0172.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0172.980] CloseHandle (hObject=0xa4) returned 1 [0172.980] AreFileApisANSI () returned 1 [0172.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0172.985] CloseHandle (hObject=0xa4) returned 1 [0172.986] AreFileApisANSI () returned 1 [0172.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497d28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0173.007] CloseHandle (hObject=0xa0) returned 1 [0173.007] AreFileApisANSI () returned 1 [0173.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4987a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0173.009] CloseHandle (hObject=0xa0) returned 1 [0173.009] AreFileApisANSI () returned 1 [0173.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0173.010] CloseHandle (hObject=0xa0) returned 1 [0173.011] AreFileApisANSI () returned 1 [0173.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0173.016] CloseHandle (hObject=0xa4) returned 1 [0173.017] AreFileApisANSI () returned 1 [0173.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0173.018] CloseHandle (hObject=0xa4) returned 1 [0173.018] AreFileApisANSI () returned 1 [0173.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0173.020] CloseHandle (hObject=0xa4) returned 1 [0173.020] AreFileApisANSI () returned 1 [0173.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0173.022] CloseHandle (hObject=0xa8) returned 1 [0173.022] AreFileApisANSI () returned 1 [0173.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0173.025] CloseHandle (hObject=0xa8) returned 1 [0173.026] AreFileApisANSI () returned 1 [0173.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0173.033] CloseHandle (hObject=0xa8) returned 1 [0173.033] AreFileApisANSI () returned 1 [0173.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0173.034] CloseHandle (hObject=0xa8) returned 1 [0173.035] AreFileApisANSI () returned 1 [0173.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0173.036] CloseHandle (hObject=0xa8) returned 1 [0173.037] AreFileApisANSI () returned 1 [0173.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0173.039] CloseHandle (hObject=0xa8) returned 1 [0173.040] AreFileApisANSI () returned 1 [0173.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0173.041] CloseHandle (hObject=0xa8) returned 1 [0173.042] AreFileApisANSI () returned 1 [0173.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0173.047] CloseHandle (hObject=0xa8) returned 1 [0173.047] AreFileApisANSI () returned 1 [0173.047] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0173.051] CloseHandle (hObject=0xa8) returned 1 [0173.052] AreFileApisANSI () returned 1 [0173.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0173.053] CloseHandle (hObject=0xa8) returned 1 [0173.053] AreFileApisANSI () returned 1 [0173.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0173.054] CloseHandle (hObject=0xa8) returned 1 [0173.055] AreFileApisANSI () returned 1 [0173.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0173.063] CloseHandle (hObject=0xa8) returned 1 [0173.064] AreFileApisANSI () returned 1 [0173.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0173.065] CloseHandle (hObject=0xa4) returned 1 [0173.066] AreFileApisANSI () returned 1 [0173.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0173.067] CloseHandle (hObject=0xa4) returned 1 [0173.068] AreFileApisANSI () returned 1 [0173.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0173.072] CloseHandle (hObject=0xa4) returned 1 [0173.072] AreFileApisANSI () returned 1 [0173.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0173.075] CloseHandle (hObject=0xa4) returned 1 [0173.075] AreFileApisANSI () returned 1 [0173.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0173.077] CloseHandle (hObject=0xa4) returned 1 [0173.077] AreFileApisANSI () returned 1 [0173.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0173.081] CloseHandle (hObject=0xa4) returned 1 [0173.081] AreFileApisANSI () returned 1 [0173.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0173.083] CloseHandle (hObject=0xa4) returned 1 [0173.083] AreFileApisANSI () returned 1 [0173.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0173.085] CloseHandle (hObject=0xa4) returned 1 [0173.085] AreFileApisANSI () returned 1 [0173.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0173.092] CloseHandle (hObject=0xa4) returned 1 [0173.093] AreFileApisANSI () returned 1 [0173.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eda0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 157 [0173.095] CloseHandle (hObject=0xa4) returned 1 [0173.096] AreFileApisANSI () returned 1 [0173.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0173.099] CloseHandle (hObject=0xa4) returned 1 [0173.099] AreFileApisANSI () returned 1 [0173.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f200, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 157 [0173.101] CloseHandle (hObject=0xa4) returned 1 [0173.101] AreFileApisANSI () returned 1 [0173.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 173 [0173.125] CloseHandle (hObject=0xa8) returned 1 [0173.126] AreFileApisANSI () returned 1 [0173.126] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 170 [0173.128] CloseHandle (hObject=0xa8) returned 1 [0173.128] AreFileApisANSI () returned 1 [0173.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 173 [0173.130] CloseHandle (hObject=0xa8) returned 1 [0173.130] AreFileApisANSI () returned 1 [0173.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 172 [0173.158] CloseHandle (hObject=0xac) returned 1 [0173.159] AreFileApisANSI () returned 1 [0173.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 172 [0173.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf2d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 181 [0173.159] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0173.160] AreFileApisANSI () returned 1 [0173.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0173.161] CloseHandle (hObject=0xa4) returned 1 [0173.161] AreFileApisANSI () returned 1 [0173.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0173.163] CloseHandle (hObject=0xa4) returned 1 [0173.163] AreFileApisANSI () returned 1 [0173.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0173.174] CloseHandle (hObject=0xa4) returned 1 [0173.175] AreFileApisANSI () returned 1 [0173.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0173.192] CloseHandle (hObject=0xa4) returned 1 [0173.193] AreFileApisANSI () returned 1 [0173.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0173.194] CloseHandle (hObject=0xa4) returned 1 [0173.194] AreFileApisANSI () returned 1 [0173.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0173.195] CloseHandle (hObject=0xa4) returned 1 [0173.196] AreFileApisANSI () returned 1 [0173.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0173.215] CloseHandle (hObject=0xa8) returned 1 [0173.216] AreFileApisANSI () returned 1 [0173.216] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0173.216] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0173.216] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0173.217] AreFileApisANSI () returned 1 [0173.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0173.218] CloseHandle (hObject=0xa4) returned 1 [0173.219] AreFileApisANSI () returned 1 [0173.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0173.220] CloseHandle (hObject=0xa4) returned 1 [0173.220] AreFileApisANSI () returned 1 [0173.220] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0173.224] CloseHandle (hObject=0xa4) returned 1 [0173.224] AreFileApisANSI () returned 1 [0173.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0173.225] CloseHandle (hObject=0xa4) returned 1 [0173.226] AreFileApisANSI () returned 1 [0173.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0173.227] CloseHandle (hObject=0xa4) returned 1 [0173.227] AreFileApisANSI () returned 1 [0173.227] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0173.229] CloseHandle (hObject=0xa4) returned 1 [0173.230] AreFileApisANSI () returned 1 [0173.230] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0173.234] CloseHandle (hObject=0xa0) returned 1 [0173.234] AreFileApisANSI () returned 1 [0173.234] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0173.235] CloseHandle (hObject=0xa0) returned 1 [0173.235] AreFileApisANSI () returned 1 [0173.235] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0173.239] CloseHandle (hObject=0xa0) returned 1 [0173.239] AreFileApisANSI () returned 1 [0173.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0173.244] CloseHandle (hObject=0xa4) returned 1 [0173.244] AreFileApisANSI () returned 1 [0173.244] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0173.246] CloseHandle (hObject=0xa4) returned 1 [0173.246] AreFileApisANSI () returned 1 [0173.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0173.248] CloseHandle (hObject=0xa4) returned 1 [0173.248] AreFileApisANSI () returned 1 [0173.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0173.258] CloseHandle (hObject=0xa8) returned 1 [0173.258] AreFileApisANSI () returned 1 [0173.258] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0173.259] CloseHandle (hObject=0xa8) returned 1 [0173.260] AreFileApisANSI () returned 1 [0173.260] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0173.262] CloseHandle (hObject=0xa8) returned 1 [0173.263] AreFileApisANSI () returned 1 [0173.263] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0173.264] CloseHandle (hObject=0xac) returned 1 [0173.264] AreFileApisANSI () returned 1 [0173.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0173.266] CloseHandle (hObject=0xac) returned 1 [0173.266] AreFileApisANSI () returned 1 [0173.266] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0173.277] CloseHandle (hObject=0xac) returned 1 [0173.278] AreFileApisANSI () returned 1 [0173.278] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0173.281] CloseHandle (hObject=0xac) returned 1 [0173.281] AreFileApisANSI () returned 1 [0173.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49be28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0173.283] CloseHandle (hObject=0xac) returned 1 [0173.283] AreFileApisANSI () returned 1 [0173.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0173.286] CloseHandle (hObject=0xac) returned 1 [0173.287] AreFileApisANSI () returned 1 [0173.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0173.288] CloseHandle (hObject=0xac) returned 1 [0173.289] AreFileApisANSI () returned 1 [0173.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0173.290] CloseHandle (hObject=0xac) returned 1 [0173.291] AreFileApisANSI () returned 1 [0173.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0173.294] CloseHandle (hObject=0xac) returned 1 [0173.295] AreFileApisANSI () returned 1 [0173.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0173.296] CloseHandle (hObject=0xac) returned 1 [0173.297] AreFileApisANSI () returned 1 [0173.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0173.298] CloseHandle (hObject=0xac) returned 1 [0173.298] AreFileApisANSI () returned 1 [0173.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0173.301] CloseHandle (hObject=0xac) returned 1 [0173.303] AreFileApisANSI () returned 1 [0173.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0173.306] CloseHandle (hObject=0xac) returned 1 [0173.306] AreFileApisANSI () returned 1 [0173.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0173.307] CloseHandle (hObject=0xac) returned 1 [0173.308] AreFileApisANSI () returned 1 [0173.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0173.337] CloseHandle (hObject=0xac) returned 1 [0173.338] AreFileApisANSI () returned 1 [0173.338] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 141 [0173.341] CloseHandle (hObject=0xb0) returned 1 [0173.341] AreFileApisANSI () returned 1 [0173.341] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bee20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0173.389] CloseHandle (hObject=0xb0) returned 1 [0173.389] AreFileApisANSI () returned 1 [0173.389] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf398, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 141 [0173.391] CloseHandle (hObject=0xb0) returned 1 [0173.391] AreFileApisANSI () returned 1 [0173.391] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0173.432] CloseHandle (hObject=0xb4) returned 1 [0173.433] AreFileApisANSI () returned 1 [0173.433] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0173.439] CloseHandle (hObject=0xb4) returned 1 [0173.439] AreFileApisANSI () returned 1 [0173.439] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ef60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0173.442] CloseHandle (hObject=0xb4) returned 1 [0173.444] AreFileApisANSI () returned 1 [0173.444] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0173.449] CloseHandle (hObject=0xb4) returned 1 [0173.450] AreFileApisANSI () returned 1 [0173.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ea20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 147 [0173.473] CloseHandle (hObject=0xb4) returned 1 [0173.474] AreFileApisANSI () returned 1 [0173.474] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0173.502] CloseHandle (hObject=0xb4) returned 1 [0173.541] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0x494ee0 [0173.687] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.687] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.688] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.688] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.689] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.689] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.689] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.689] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.689] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.689] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.689] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.742] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.742] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.742] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.742] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.742] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.742] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.742] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.742] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.742] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.743] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.743] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.743] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.743] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.743] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0 [0173.743] FindClose (in: hFindFile=0x494ee0 | out: hFindFile=0x494ee0) returned 1 [0173.743] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 0 [0173.743] FindClose (in: hFindFile=0x494f60 | out: hFindFile=0x494f60) returned 1 [0173.744] FindNextFileA (in: hFindFile=0x4949e0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0173.744] FindNextFileA (in: hFindFile=0x4949e0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0173.744] FindNextFileA (in: hFindFile=0x4949e0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0173.744] FindNextFileA (in: hFindFile=0x4949e0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0173.744] AreFileApisANSI () returned 1 [0173.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfb68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0173.744] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0173.746] GetFileType (hFile=0xb0) returned 0x1 [0173.746] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0173.748] CloseHandle (hObject=0xb0) returned 1 [0173.749] AreFileApisANSI () returned 1 [0173.749] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf2d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0173.749] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0173.751] GetFileType (hFile=0xb0) returned 0x1 [0173.752] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0173.753] CloseHandle (hObject=0xb0) returned 1 [0173.753] AreFileApisANSI () returned 1 [0173.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf2d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0173.753] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0173.754] GetFileType (hFile=0xb0) returned 0x1 [0173.754] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0173.755] CloseHandle (hObject=0xb0) returned 1 [0173.756] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 0x494ba0 [0173.756] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.756] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.756] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.756] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.756] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.756] AreFileApisANSI () returned 1 [0173.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0173.756] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0173.757] GetFileType (hFile=0xb4) returned 0x1 [0173.757] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0173.758] CloseHandle (hObject=0xb4) returned 1 [0173.758] AreFileApisANSI () returned 1 [0173.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bee20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0173.758] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0173.763] GetFileType (hFile=0xb4) returned 0x1 [0173.763] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0173.764] CloseHandle (hObject=0xb4) returned 1 [0173.764] AreFileApisANSI () returned 1 [0173.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf398, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0173.764] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0173.765] GetFileType (hFile=0xb4) returned 0x1 [0173.765] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0173.766] CloseHandle (hObject=0xb4) returned 1 [0173.766] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0x494ee0 [0173.766] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.767] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.767] AreFileApisANSI () returned 1 [0173.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ee80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0173.767] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\Certificates\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\certificates\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0173.767] GetFileType (hFile=0xb8) returned 0x1 [0173.768] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0173.768] CloseHandle (hObject=0xb8) returned 1 [0173.769] AreFileApisANSI () returned 1 [0173.769] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f3c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0173.769] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\Certificates\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\certificates\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0173.770] GetFileType (hFile=0xb8) returned 0x1 [0173.770] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0173.771] CloseHandle (hObject=0xb8) returned 1 [0173.771] AreFileApisANSI () returned 1 [0173.771] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0173.771] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\Certificates\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\certificates\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0173.787] GetFileType (hFile=0xb8) returned 0x1 [0173.787] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0173.788] CloseHandle (hObject=0xb8) returned 1 [0173.789] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 0x494fe0 [0173.789] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0173.789] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0173.789] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0173.789] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0173.789] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 0 [0173.789] FindClose (in: hFindFile=0x494fe0 | out: hFindFile=0x494fe0) returned 1 [0173.789] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.789] AreFileApisANSI () returned 1 [0173.790] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ebe0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0173.790] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRLs\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\crls\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0173.791] GetFileType (hFile=0xb8) returned 0x1 [0173.791] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0173.792] CloseHandle (hObject=0xb8) returned 1 [0173.792] AreFileApisANSI () returned 1 [0173.793] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0173.793] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRLs\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\crls\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0173.831] GetFileType (hFile=0xb8) returned 0x1 [0173.831] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0173.832] CloseHandle (hObject=0xb8) returned 1 [0173.833] AreFileApisANSI () returned 1 [0173.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0173.833] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRLs\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\crls\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0173.835] GetFileType (hFile=0xb8) returned 0x1 [0173.835] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0173.838] CloseHandle (hObject=0xb8) returned 1 [0173.839] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 0x494b20 [0173.839] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0173.839] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0173.839] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0173.839] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0173.839] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 0 [0173.839] FindClose (in: hFindFile=0x494b20 | out: hFindFile=0x494b20) returned 1 [0173.840] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.840] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.840] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.840] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.840] AreFileApisANSI () returned 1 [0173.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ecc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0173.840] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CTLs\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\ctls\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0173.841] GetFileType (hFile=0xb8) returned 0x1 [0173.841] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0173.842] CloseHandle (hObject=0xb8) returned 1 [0173.842] AreFileApisANSI () returned 1 [0173.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0173.842] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CTLs\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\ctls\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0173.843] GetFileType (hFile=0xb8) returned 0x1 [0173.843] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0173.844] CloseHandle (hObject=0xb8) returned 1 [0173.844] AreFileApisANSI () returned 1 [0173.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f3c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0173.844] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CTLs\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\ctls\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0173.846] GetFileType (hFile=0xb8) returned 0x1 [0173.846] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0173.847] CloseHandle (hObject=0xb8) returned 1 [0173.847] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 0x4948e0 [0173.847] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0173.848] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0173.848] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0173.848] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0173.848] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 0 [0173.848] FindClose (in: hFindFile=0x4948e0 | out: hFindFile=0x4948e0) returned 1 [0173.848] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0 [0173.848] FindClose (in: hFindFile=0x494ee0 | out: hFindFile=0x494ee0) returned 1 [0173.848] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 0 [0173.848] FindClose (in: hFindFile=0x494ba0 | out: hFindFile=0x494ba0) returned 1 [0173.849] FindNextFileA (in: hFindFile=0x4949e0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0173.849] AreFileApisANSI () returned 1 [0173.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0173.849] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\windows\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0173.849] GetFileType (hFile=0xb0) returned 0x1 [0173.849] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0173.850] CloseHandle (hObject=0xb0) returned 1 [0173.851] AreFileApisANSI () returned 1 [0173.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0173.851] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\windows\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0173.851] GetFileType (hFile=0xb0) returned 0x1 [0173.851] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0173.852] CloseHandle (hObject=0xb0) returned 1 [0173.853] AreFileApisANSI () returned 1 [0173.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0173.853] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\windows\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0173.868] GetFileType (hFile=0xb0) returned 0x1 [0173.868] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0173.869] CloseHandle (hObject=0xb0) returned 1 [0173.869] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\*", lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 0x494ba0 [0173.870] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.870] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.870] AreFileApisANSI () returned 1 [0173.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf2d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0173.870] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\windows\\1605653898\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0173.872] GetFileType (hFile=0xb4) returned 0x1 [0173.872] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0173.873] CloseHandle (hObject=0xb4) returned 1 [0173.873] AreFileApisANSI () returned 1 [0173.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf398, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0173.873] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\windows\\1605653898\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0173.876] GetFileType (hFile=0xb4) returned 0x1 [0173.876] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0173.877] CloseHandle (hObject=0xb4) returned 1 [0173.877] AreFileApisANSI () returned 1 [0173.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf6b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0173.877] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\windows\\1605653898\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0173.878] GetFileType (hFile=0xb4) returned 0x1 [0173.878] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0173.880] CloseHandle (hObject=0xb4) returned 1 [0173.880] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\*", lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0x494f60 [0173.880] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.880] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.880] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.880] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.880] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0173.880] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0 [0173.881] FindClose (in: hFindFile=0x494f60 | out: hFindFile=0x494f60) returned 1 [0173.881] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.881] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.881] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.881] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 0 [0173.881] FindClose (in: hFindFile=0x494ba0 | out: hFindFile=0x494ba0) returned 1 [0173.882] FindNextFileA (in: hFindFile=0x4949e0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0 [0173.882] FindClose (in: hFindFile=0x4949e0 | out: hFindFile=0x4949e0) returned 1 [0173.882] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0173.882] AreFileApisANSI () returned 1 [0173.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0173.882] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0173.887] GetFileType (hFile=0xac) returned 0x1 [0173.887] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0173.888] CloseHandle (hObject=0xac) returned 1 [0173.889] AreFileApisANSI () returned 1 [0173.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0173.889] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0173.890] GetFileType (hFile=0xac) returned 0x1 [0173.890] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0173.891] CloseHandle (hObject=0xac) returned 1 [0173.891] AreFileApisANSI () returned 1 [0173.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0173.891] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0173.894] GetFileType (hFile=0xac) returned 0x1 [0173.894] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0173.895] CloseHandle (hObject=0xac) returned 1 [0173.895] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\*", lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0x494d20 [0173.896] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0173.896] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0173.896] AreFileApisANSI () returned 1 [0173.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfc30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0173.896] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0173.897] GetFileType (hFile=0xb0) returned 0x1 [0173.897] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0173.898] CloseHandle (hObject=0xb0) returned 1 [0173.898] AreFileApisANSI () returned 1 [0173.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0173.898] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0173.910] GetFileType (hFile=0xb0) returned 0x1 [0173.910] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0173.914] CloseHandle (hObject=0xb0) returned 1 [0173.914] AreFileApisANSI () returned 1 [0173.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf6b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0173.914] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0173.915] GetFileType (hFile=0xb0) returned 0x1 [0173.915] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0173.916] CloseHandle (hObject=0xb0) returned 1 [0173.916] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\*", lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 0x494ce0 [0173.916] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.917] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.917] AreFileApisANSI () returned 1 [0173.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0173.917] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8df8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0173.918] GetFileType (hFile=0xb4) returned 0x1 [0173.918] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea8 | out: lpNewFilePointer=0x0) returned 1 [0173.918] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e5c | out: lpNewFilePointer=0x0) returned 1 [0173.918] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e8c | out: lpNewFilePointer=0x0) returned 1 [0173.918] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.918] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.919] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e8c | out: lpNewFilePointer=0x0) returned 1 [0173.919] CloseHandle (hObject=0xb4) returned 1 [0173.919] AreFileApisANSI () returned 1 [0173.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0173.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0173.919] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0173.920] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.920] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.920] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.920] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 0 [0173.920] FindClose (in: hFindFile=0x494ce0 | out: hFindFile=0x494ce0) returned 1 [0173.920] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0173.920] AreFileApisANSI () returned 1 [0173.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfb68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0173.921] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0173.924] GetFileType (hFile=0xb0) returned 0x1 [0173.924] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0173.925] CloseHandle (hObject=0xb0) returned 1 [0173.925] AreFileApisANSI () returned 1 [0173.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bed58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0173.925] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0173.926] GetFileType (hFile=0xb0) returned 0x1 [0173.926] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0173.927] CloseHandle (hObject=0xb0) returned 1 [0173.927] AreFileApisANSI () returned 1 [0173.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfb68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0173.927] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0173.928] GetFileType (hFile=0xb0) returned 0x1 [0173.928] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0173.929] CloseHandle (hObject=0xb0) returned 1 [0173.929] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\*", lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 0x494ce0 [0173.929] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.930] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.930] AreFileApisANSI () returned 1 [0173.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0173.930] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\1zja02jo.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8df8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0173.931] GetFileType (hFile=0xb4) returned 0x1 [0173.931] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea8 | out: lpNewFilePointer=0x0) returned 1 [0173.931] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e5c | out: lpNewFilePointer=0x0) returned 1 [0173.931] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e8c | out: lpNewFilePointer=0x0) returned 1 [0173.931] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.931] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.931] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e8c | out: lpNewFilePointer=0x0) returned 1 [0173.931] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.932] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.932] ReadFile (in: hFile=0xb4, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3d8e24*=0x6f, lpOverlapped=0x0) returned 1 [0173.933] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.933] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.933] WriteFile (in: hFile=0xb4, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.933] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.933] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.933] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.933] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.934] ReadFile (in: hFile=0xb4, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3d8e24*=0x67, lpOverlapped=0x0) returned 1 [0173.934] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.934] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.934] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.934] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.934] WriteFile (in: hFile=0xb4, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.934] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.934] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.934] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.934] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.934] ReadFile (in: hFile=0xb4, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3d8e24*=0x5f, lpOverlapped=0x0) returned 1 [0173.934] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.935] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.935] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.935] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.935] WriteFile (in: hFile=0xb4, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.935] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.935] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.935] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.935] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.935] ReadFile (in: hFile=0xb4, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3d8e24*=0x57, lpOverlapped=0x0) returned 1 [0173.935] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.935] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.935] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.936] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.936] WriteFile (in: hFile=0xb4, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.936] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.936] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.936] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.936] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.936] ReadFile (in: hFile=0xb4, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3d8e24*=0x4f, lpOverlapped=0x0) returned 1 [0173.936] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.936] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.936] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.936] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.936] WriteFile (in: hFile=0xb4, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.937] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.937] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.937] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.937] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.937] ReadFile (in: hFile=0xb4, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3d8e24*=0x47, lpOverlapped=0x0) returned 1 [0173.937] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.937] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.937] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.937] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.937] WriteFile (in: hFile=0xb4, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.937] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.937] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.938] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.938] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.938] ReadFile (in: hFile=0xb4, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3d8e24*=0x3f, lpOverlapped=0x0) returned 1 [0173.938] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.938] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.938] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.938] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.938] WriteFile (in: hFile=0xb4, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.938] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.938] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.938] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.938] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.938] ReadFile (in: hFile=0xb4, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3d8e24*=0x37, lpOverlapped=0x0) returned 1 [0173.939] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.939] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.939] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.939] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.939] WriteFile (in: hFile=0xb4, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.939] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.939] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.939] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.939] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.939] ReadFile (in: hFile=0xb4, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3d8e24*=0x2f, lpOverlapped=0x0) returned 1 [0173.939] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.939] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.939] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.940] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.940] WriteFile (in: hFile=0xb4, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.940] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.940] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.940] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.940] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.940] ReadFile (in: hFile=0xb4, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3d8e24*=0x27, lpOverlapped=0x0) returned 1 [0173.940] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.940] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.940] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.940] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.940] WriteFile (in: hFile=0xb4, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.941] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.941] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.941] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.941] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.941] ReadFile (in: hFile=0xb4, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3d8e24*=0x1f, lpOverlapped=0x0) returned 1 [0173.941] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.941] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.941] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.941] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.941] WriteFile (in: hFile=0xb4, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.941] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.941] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.941] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.942] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.942] ReadFile (in: hFile=0xb4, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3d8e24*=0x17, lpOverlapped=0x0) returned 1 [0173.942] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.942] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.942] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.942] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.942] WriteFile (in: hFile=0xb4, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.942] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.942] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.942] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.942] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.942] ReadFile (in: hFile=0xb4, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3d8e24*=0xf, lpOverlapped=0x0) returned 1 [0173.942] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.942] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.943] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.943] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.943] WriteFile (in: hFile=0xb4, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.943] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.943] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.943] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.943] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.943] ReadFile (in: hFile=0xb4, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3d8e24*=0x7, lpOverlapped=0x0) returned 1 [0173.943] ReadFile (in: hFile=0xb4, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3d8e24*=0x0, lpOverlapped=0x0) returned 1 [0173.943] CloseHandle (hObject=0xb4) returned 1 [0173.944] AreFileApisANSI () returned 1 [0173.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0173.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0173.944] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\1zja02jo.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\1zja02jo.txt.cryptoid"), dwFlags=0x2) returned 1 [0173.945] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0173.945] AreFileApisANSI () returned 1 [0173.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0173.945] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\268tpjia.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8df8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0173.946] GetFileType (hFile=0xb4) returned 0x1 [0173.946] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea8 | out: lpNewFilePointer=0x0) returned 1 [0173.946] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e5c | out: lpNewFilePointer=0x0) returned 1 [0173.946] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e8c | out: lpNewFilePointer=0x0) returned 1 [0173.946] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.946] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.946] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e8c | out: lpNewFilePointer=0x0) returned 1 [0173.946] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.947] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.947] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x26c, lpOverlapped=0x0) returned 1 [0173.948] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.948] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.948] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.948] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.948] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.948] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.948] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.948] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x264, lpOverlapped=0x0) returned 1 [0173.949] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.949] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.949] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.949] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.949] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.949] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.949] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.949] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.949] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.949] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x25c, lpOverlapped=0x0) returned 1 [0173.949] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.949] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.950] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.950] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.950] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.950] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.950] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.950] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.950] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.950] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x254, lpOverlapped=0x0) returned 1 [0173.950] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.950] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.950] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.950] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.951] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.951] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.951] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.951] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.951] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.951] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x24c, lpOverlapped=0x0) returned 1 [0173.951] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.951] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.951] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.951] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.951] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.951] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.952] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.952] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.952] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.952] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x244, lpOverlapped=0x0) returned 1 [0173.952] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.952] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.952] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.952] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.952] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.952] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.952] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.952] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.952] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.953] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x23c, lpOverlapped=0x0) returned 1 [0173.953] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.953] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.953] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.953] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.953] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.953] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.953] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.953] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.953] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.953] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x234, lpOverlapped=0x0) returned 1 [0173.953] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.953] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.954] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.954] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.954] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.954] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.954] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.954] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.954] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.954] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x22c, lpOverlapped=0x0) returned 1 [0173.954] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.954] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.954] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.954] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.954] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.955] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.955] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.955] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.955] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.955] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x224, lpOverlapped=0x0) returned 1 [0173.955] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.955] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.955] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.955] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.955] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.955] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.955] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.956] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.956] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.956] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x21c, lpOverlapped=0x0) returned 1 [0173.956] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.956] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.956] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.956] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.956] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.956] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.956] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.956] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.956] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.957] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x214, lpOverlapped=0x0) returned 1 [0173.957] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.957] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.957] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.957] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.957] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.957] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.957] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.957] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.957] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.958] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x20c, lpOverlapped=0x0) returned 1 [0173.958] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.958] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.958] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.958] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.958] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.958] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.958] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.958] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.958] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.958] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x204, lpOverlapped=0x0) returned 1 [0173.959] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.959] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.959] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.959] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.959] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.959] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.959] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.959] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.959] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.959] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x1fc, lpOverlapped=0x0) returned 1 [0173.959] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.960] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.960] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.960] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.960] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.960] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.960] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.960] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.960] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.960] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x1f4, lpOverlapped=0x0) returned 1 [0173.960] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.960] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.960] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.960] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.961] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.961] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.961] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.961] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.961] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.961] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x1ec, lpOverlapped=0x0) returned 1 [0173.961] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.961] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.961] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.961] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.961] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.961] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.962] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.962] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.962] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.962] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x1e4, lpOverlapped=0x0) returned 1 [0173.962] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.962] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.962] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.962] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.962] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.962] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.962] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.962] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.963] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.963] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x1dc, lpOverlapped=0x0) returned 1 [0173.963] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.963] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.963] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.963] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.963] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.963] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.963] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.963] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.963] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.964] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x1d4, lpOverlapped=0x0) returned 1 [0173.964] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.964] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.964] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.964] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.964] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.965] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.965] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.965] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.965] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.965] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x1cc, lpOverlapped=0x0) returned 1 [0173.965] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.965] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.965] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.965] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.965] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.965] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.966] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.966] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.966] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.966] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x1c4, lpOverlapped=0x0) returned 1 [0173.966] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.966] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.966] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.966] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.966] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.966] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.966] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.966] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.966] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.967] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x1bc, lpOverlapped=0x0) returned 1 [0173.967] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.967] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.967] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.967] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.967] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.967] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.967] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.967] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.967] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.967] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x1b4, lpOverlapped=0x0) returned 1 [0173.967] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.968] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.968] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.968] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.968] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.968] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.968] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.968] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.968] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.968] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x1ac, lpOverlapped=0x0) returned 1 [0173.968] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.968] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.968] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.968] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.969] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.969] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.969] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.969] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.969] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.969] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x1a4, lpOverlapped=0x0) returned 1 [0173.969] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.969] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.969] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.969] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.969] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.969] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.970] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.970] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.970] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.970] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x19c, lpOverlapped=0x0) returned 1 [0173.970] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.970] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.970] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.970] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.970] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.970] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.970] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.970] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.970] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.971] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x194, lpOverlapped=0x0) returned 1 [0173.971] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.971] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.971] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.971] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.971] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.971] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.971] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.971] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.971] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.971] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x18c, lpOverlapped=0x0) returned 1 [0173.972] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.972] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.972] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.972] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.972] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.972] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.972] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.972] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.972] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.972] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x184, lpOverlapped=0x0) returned 1 [0173.972] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.973] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.973] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.973] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e58 | out: lpNewFilePointer=0x0) returned 1 [0173.973] WriteFile (in: hFile=0xb4, lpBuffer=0x4b7db0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesWritten=0x3d8e24*=0x8, lpOverlapped=0x0) returned 1 [0173.973] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e80 | out: lpNewFilePointer=0x0) returned 1 [0173.973] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e14 | out: lpNewFilePointer=0x0) returned 1 [0173.973] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e90 | out: lpNewFilePointer=0x0) returned 1 [0173.973] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e44 | out: lpNewFilePointer=0x0) returned 1 [0173.973] ReadFile (in: hFile=0xb4, lpBuffer=0x4b7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d8e24, lpOverlapped=0x0 | out: lpBuffer=0x4b7db0*, lpNumberOfBytesRead=0x3d8e24*=0x17c, lpOverlapped=0x0) returned 1 [0173.973] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e94 | out: lpNewFilePointer=0x0) returned 1 [0173.973] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8e28 | out: lpNewFilePointer=0x0) returned 1 [0173.973] SetFilePointerEx (in: hFile=0xb4, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8ea4 | out: lpNewFilePointer=0x0) returned 1 [0173.974] CloseHandle (hObject=0xb4) returned 1 [0173.975] AreFileApisANSI () returned 1 [0173.975] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0173.975] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0173.975] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\268tpjia.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\268tpjia.txt.cryptoid"), dwFlags=0x2) returned 1 [0173.988] AreFileApisANSI () returned 1 [0173.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0173.990] CloseHandle (hObject=0xb4) returned 1 [0173.991] AreFileApisANSI () returned 1 [0173.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0173.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0173.991] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\6kwa3r8c.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\6kwa3r8c.txt.cryptoid"), dwFlags=0x2) returned 1 [0173.992] AreFileApisANSI () returned 1 [0173.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.003] CloseHandle (hObject=0xb4) returned 1 [0174.004] AreFileApisANSI () returned 1 [0174.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.004] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\85dgk2j5.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\85dgk2j5.txt.cryptoid"), dwFlags=0x2) returned 1 [0174.005] AreFileApisANSI () returned 1 [0174.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0174.006] CloseHandle (hObject=0xb4) returned 1 [0174.006] AreFileApisANSI () returned 1 [0174.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0174.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0174.007] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0174.008] AreFileApisANSI () returned 1 [0174.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.011] CloseHandle (hObject=0xb4) returned 1 [0174.012] AreFileApisANSI () returned 1 [0174.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.012] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\fpndv7t3.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\fpndv7t3.txt.cryptoid"), dwFlags=0x2) returned 1 [0174.013] AreFileApisANSI () returned 1 [0174.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.016] CloseHandle (hObject=0xb4) returned 1 [0174.017] AreFileApisANSI () returned 1 [0174.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.017] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\j9kflzdx.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\j9kflzdx.txt.cryptoid"), dwFlags=0x2) returned 1 [0174.018] AreFileApisANSI () returned 1 [0174.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.021] CloseHandle (hObject=0xb4) returned 1 [0174.021] AreFileApisANSI () returned 1 [0174.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.022] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\jn00akv9.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\jn00akv9.txt.cryptoid"), dwFlags=0x2) returned 1 [0174.024] AreFileApisANSI () returned 1 [0174.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.027] CloseHandle (hObject=0xb4) returned 1 [0174.028] AreFileApisANSI () returned 1 [0174.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.028] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\or8k8vrm.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\or8k8vrm.txt.cryptoid"), dwFlags=0x2) returned 1 [0174.029] AreFileApisANSI () returned 1 [0174.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.032] CloseHandle (hObject=0xb4) returned 1 [0174.033] AreFileApisANSI () returned 1 [0174.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.033] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\tk0lxhbl.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\tk0lxhbl.txt.cryptoid"), dwFlags=0x2) returned 1 [0174.034] AreFileApisANSI () returned 1 [0174.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.036] CloseHandle (hObject=0xb4) returned 1 [0174.036] AreFileApisANSI () returned 1 [0174.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.036] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vc62gjsf.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vc62gjsf.txt.cryptoid"), dwFlags=0x2) returned 1 [0174.038] AreFileApisANSI () returned 1 [0174.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.039] CloseHandle (hObject=0xb4) returned 1 [0174.040] AreFileApisANSI () returned 1 [0174.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.040] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vsmdvd55.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vsmdvd55.txt.cryptoid"), dwFlags=0x2) returned 1 [0174.041] AreFileApisANSI () returned 1 [0174.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4befb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0174.042] CloseHandle (hObject=0xb0) returned 1 [0174.043] AreFileApisANSI () returned 1 [0174.043] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4beee8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0174.046] CloseHandle (hObject=0xb0) returned 1 [0174.046] AreFileApisANSI () returned 1 [0174.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf2d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0174.047] CloseHandle (hObject=0xb0) returned 1 [0174.048] AreFileApisANSI () returned 1 [0174.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0174.049] CloseHandle (hObject=0xb4) returned 1 [0174.050] AreFileApisANSI () returned 1 [0174.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0174.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0174.050] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\history\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\history\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0174.051] AreFileApisANSI () returned 1 [0174.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfb68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 142 [0174.053] CloseHandle (hObject=0xb0) returned 1 [0174.053] AreFileApisANSI () returned 1 [0174.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfb68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 139 [0174.056] CloseHandle (hObject=0xb0) returned 1 [0174.057] AreFileApisANSI () returned 1 [0174.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf6b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 142 [0174.059] CloseHandle (hObject=0xb0) returned 1 [0174.059] AreFileApisANSI () returned 1 [0174.059] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0174.060] CloseHandle (hObject=0xb4) returned 1 [0174.060] AreFileApisANSI () returned 1 [0174.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0174.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0174.060] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatcache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatcache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0174.062] AreFileApisANSI () returned 1 [0174.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf848, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0174.064] CloseHandle (hObject=0xb0) returned 1 [0174.064] AreFileApisANSI () returned 1 [0174.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bed58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 141 [0174.073] CloseHandle (hObject=0xb0) returned 1 [0174.074] AreFileApisANSI () returned 1 [0174.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfb68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0174.076] CloseHandle (hObject=0xb0) returned 1 [0174.076] AreFileApisANSI () returned 1 [0174.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.077] CloseHandle (hObject=0xb4) returned 1 [0174.078] AreFileApisANSI () returned 1 [0174.078] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.078] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ad68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0174.078] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatuacache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatuacache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0174.080] AreFileApisANSI () returned 1 [0174.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 145 [0174.081] CloseHandle (hObject=0xb0) returned 1 [0174.082] AreFileApisANSI () returned 1 [0174.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 142 [0174.091] CloseHandle (hObject=0xb0) returned 1 [0174.092] AreFileApisANSI () returned 1 [0174.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfc30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 145 [0174.094] CloseHandle (hObject=0xb0) returned 1 [0174.095] AreFileApisANSI () returned 1 [0174.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0174.095] CloseHandle (hObject=0xb4) returned 1 [0174.096] AreFileApisANSI () returned 1 [0174.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0174.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49acc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 147 [0174.096] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ieflipaheadcache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ieflipaheadcache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0174.098] AreFileApisANSI () returned 1 [0174.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf6b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0174.100] CloseHandle (hObject=0xb0) returned 1 [0174.101] AreFileApisANSI () returned 1 [0174.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf848, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0174.102] CloseHandle (hObject=0xb0) returned 1 [0174.103] AreFileApisANSI () returned 1 [0174.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfc30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0174.107] CloseHandle (hObject=0xb0) returned 1 [0174.107] AreFileApisANSI () returned 1 [0174.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf2d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 141 [0174.109] CloseHandle (hObject=0xb4) returned 1 [0174.109] AreFileApisANSI () returned 1 [0174.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0174.120] CloseHandle (hObject=0xb4) returned 1 [0174.121] AreFileApisANSI () returned 1 [0174.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 141 [0174.123] CloseHandle (hObject=0xb4) returned 1 [0174.123] AreFileApisANSI () returned 1 [0174.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0174.126] CloseHandle (hObject=0xb8) returned 1 [0174.126] AreFileApisANSI () returned 1 [0174.126] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 147 [0174.130] CloseHandle (hObject=0xb8) returned 1 [0174.130] AreFileApisANSI () returned 1 [0174.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f200, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0174.132] CloseHandle (hObject=0xb8) returned 1 [0174.132] AreFileApisANSI () returned 1 [0174.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d83e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0174.133] CloseHandle (hObject=0xbc) returned 1 [0174.133] AreFileApisANSI () returned 1 [0174.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d83e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0174.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49b9e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0174.133] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0174.135] AreFileApisANSI () returned 1 [0174.135] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ea20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0174.136] CloseHandle (hObject=0xbc) returned 1 [0174.137] AreFileApisANSI () returned 1 [0174.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f040, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0174.140] CloseHandle (hObject=0xbc) returned 1 [0174.141] AreFileApisANSI () returned 1 [0174.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0174.142] CloseHandle (hObject=0xbc) returned 1 [0174.143] AreFileApisANSI () returned 1 [0174.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7a80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0174.143] CloseHandle (hObject=0xc0) returned 1 [0174.144] AreFileApisANSI () returned 1 [0174.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7a80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0174.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0174.144] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\y2ekxlk8\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\y2ekxlk8\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0174.145] AreFileApisANSI () returned 1 [0174.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f200, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0174.147] CloseHandle (hObject=0xb8) returned 1 [0174.147] AreFileApisANSI () returned 1 [0174.147] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ee80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0174.148] CloseHandle (hObject=0xb8) returned 1 [0174.149] AreFileApisANSI () returned 1 [0174.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0174.156] CloseHandle (hObject=0xb8) returned 1 [0174.157] AreFileApisANSI () returned 1 [0174.157] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0174.158] CloseHandle (hObject=0xac) returned 1 [0174.159] AreFileApisANSI () returned 1 [0174.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0174.161] CloseHandle (hObject=0xac) returned 1 [0174.161] AreFileApisANSI () returned 1 [0174.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0174.164] CloseHandle (hObject=0xac) returned 1 [0174.165] AreFileApisANSI () returned 1 [0174.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0174.166] CloseHandle (hObject=0xac) returned 1 [0174.167] AreFileApisANSI () returned 1 [0174.167] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0174.169] CloseHandle (hObject=0xac) returned 1 [0174.169] AreFileApisANSI () returned 1 [0174.169] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0174.172] CloseHandle (hObject=0xac) returned 1 [0174.173] AreFileApisANSI () returned 1 [0174.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0174.178] CloseHandle (hObject=0xa8) returned 1 [0174.179] AreFileApisANSI () returned 1 [0174.179] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0174.180] CloseHandle (hObject=0xa8) returned 1 [0174.180] AreFileApisANSI () returned 1 [0174.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0174.181] CloseHandle (hObject=0xa8) returned 1 [0174.182] AreFileApisANSI () returned 1 [0174.182] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0174.185] CloseHandle (hObject=0xac) returned 1 [0174.185] AreFileApisANSI () returned 1 [0174.185] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0174.186] CloseHandle (hObject=0xac) returned 1 [0174.187] AreFileApisANSI () returned 1 [0174.187] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0174.197] CloseHandle (hObject=0xac) returned 1 [0174.197] AreFileApisANSI () returned 1 [0174.197] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0174.199] CloseHandle (hObject=0xac) returned 1 [0174.200] AreFileApisANSI () returned 1 [0174.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0174.201] CloseHandle (hObject=0xac) returned 1 [0174.202] AreFileApisANSI () returned 1 [0174.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0174.205] CloseHandle (hObject=0xac) returned 1 [0174.206] AreFileApisANSI () returned 1 [0174.206] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0174.207] CloseHandle (hObject=0xac) returned 1 [0174.208] AreFileApisANSI () returned 1 [0174.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0174.209] CloseHandle (hObject=0xac) returned 1 [0174.210] AreFileApisANSI () returned 1 [0174.210] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49be28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0174.212] CloseHandle (hObject=0xac) returned 1 [0174.213] AreFileApisANSI () returned 1 [0174.213] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0174.215] CloseHandle (hObject=0xac) returned 1 [0174.215] AreFileApisANSI () returned 1 [0174.215] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0174.217] CloseHandle (hObject=0xac) returned 1 [0174.217] AreFileApisANSI () returned 1 [0174.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0174.227] CloseHandle (hObject=0xac) returned 1 [0174.228] AreFileApisANSI () returned 1 [0174.228] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0174.232] CloseHandle (hObject=0xac) returned 1 [0174.233] AreFileApisANSI () returned 1 [0174.233] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0174.234] CloseHandle (hObject=0xac) returned 1 [0174.234] AreFileApisANSI () returned 1 [0174.234] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0174.236] CloseHandle (hObject=0xac) returned 1 [0174.236] AreFileApisANSI () returned 1 [0174.237] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfb68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 141 [0174.238] CloseHandle (hObject=0xb0) returned 1 [0174.238] AreFileApisANSI () returned 1 [0174.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0174.242] CloseHandle (hObject=0xb0) returned 1 [0174.243] AreFileApisANSI () returned 1 [0174.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf6b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 141 [0174.246] CloseHandle (hObject=0xb0) returned 1 [0174.247] AreFileApisANSI () returned 1 [0174.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f3c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0174.260] CloseHandle (hObject=0xb4) returned 1 [0174.261] AreFileApisANSI () returned 1 [0174.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ee80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0174.262] CloseHandle (hObject=0xb4) returned 1 [0174.263] AreFileApisANSI () returned 1 [0174.263] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0174.264] CloseHandle (hObject=0xb4) returned 1 [0174.265] AreFileApisANSI () returned 1 [0174.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ebe0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0174.271] CloseHandle (hObject=0xb4) returned 1 [0174.272] AreFileApisANSI () returned 1 [0174.272] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f200, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 147 [0174.273] CloseHandle (hObject=0xb4) returned 1 [0174.274] AreFileApisANSI () returned 1 [0174.274] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0174.275] CloseHandle (hObject=0xb4) returned 1 [0174.276] AreFileApisANSI () returned 1 [0174.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf6b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0174.281] CloseHandle (hObject=0xb0) returned 1 [0174.282] AreFileApisANSI () returned 1 [0174.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf528, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0174.297] CloseHandle (hObject=0xb0) returned 1 [0174.298] AreFileApisANSI () returned 1 [0174.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf528, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0174.299] CloseHandle (hObject=0xb0) returned 1 [0174.300] AreFileApisANSI () returned 1 [0174.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf528, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0174.302] CloseHandle (hObject=0xb4) returned 1 [0174.303] AreFileApisANSI () returned 1 [0174.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfb68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0174.306] CloseHandle (hObject=0xb4) returned 1 [0174.307] AreFileApisANSI () returned 1 [0174.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfb68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0174.308] CloseHandle (hObject=0xb4) returned 1 [0174.309] AreFileApisANSI () returned 1 [0174.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ea20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0174.310] CloseHandle (hObject=0xb8) returned 1 [0174.311] AreFileApisANSI () returned 1 [0174.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f200, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0174.312] CloseHandle (hObject=0xb8) returned 1 [0174.313] AreFileApisANSI () returned 1 [0174.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f040, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0174.317] CloseHandle (hObject=0xb8) returned 1 [0174.318] AreFileApisANSI () returned 1 [0174.318] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0174.319] CloseHandle (hObject=0xb8) returned 1 [0174.320] AreFileApisANSI () returned 1 [0174.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ee80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0174.321] CloseHandle (hObject=0xb8) returned 1 [0174.322] AreFileApisANSI () returned 1 [0174.322] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ecc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0174.325] CloseHandle (hObject=0xb8) returned 1 [0174.325] AreFileApisANSI () returned 1 [0174.325] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ee80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0174.327] CloseHandle (hObject=0xb8) returned 1 [0174.327] AreFileApisANSI () returned 1 [0174.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0174.329] CloseHandle (hObject=0xb8) returned 1 [0174.329] AreFileApisANSI () returned 1 [0174.329] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f040, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0174.332] CloseHandle (hObject=0xb8) returned 1 [0174.333] AreFileApisANSI () returned 1 [0174.333] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.343] CloseHandle (hObject=0xac) returned 1 [0174.343] AreFileApisANSI () returned 1 [0174.343] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0174.345] CloseHandle (hObject=0xac) returned 1 [0174.345] AreFileApisANSI () returned 1 [0174.345] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.346] CloseHandle (hObject=0xac) returned 1 [0174.347] AreFileApisANSI () returned 1 [0174.347] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf208, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0174.351] CloseHandle (hObject=0xb0) returned 1 [0174.351] AreFileApisANSI () returned 1 [0174.351] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bee20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0174.358] CloseHandle (hObject=0xb0) returned 1 [0174.358] AreFileApisANSI () returned 1 [0174.358] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf208, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0174.360] CloseHandle (hObject=0xb0) returned 1 [0174.360] AreFileApisANSI () returned 1 [0174.360] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0174.361] CloseHandle (hObject=0xb4) returned 1 [0174.362] AreFileApisANSI () returned 1 [0174.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0174.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0174.362] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0174.363] AreFileApisANSI () returned 1 [0174.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf208, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0174.368] CloseHandle (hObject=0xb0) returned 1 [0174.369] AreFileApisANSI () returned 1 [0174.369] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfaa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0174.370] CloseHandle (hObject=0xb0) returned 1 [0174.371] AreFileApisANSI () returned 1 [0174.371] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf6b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0174.372] CloseHandle (hObject=0xb0) returned 1 [0174.372] AreFileApisANSI () returned 1 [0174.373] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.374] CloseHandle (hObject=0xb4) returned 1 [0174.375] AreFileApisANSI () returned 1 [0174.375] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.375] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.375] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\51tu1403.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\51tu1403.txt.cryptoid"), dwFlags=0x2) returned 1 [0174.376] AreFileApisANSI () returned 1 [0174.376] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.379] CloseHandle (hObject=0xb4) returned 1 [0174.380] AreFileApisANSI () returned 1 [0174.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.380] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\5gjkp08h.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\5gjkp08h.txt.cryptoid"), dwFlags=0x2) returned 1 [0174.381] AreFileApisANSI () returned 1 [0174.381] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.384] CloseHandle (hObject=0xb4) returned 1 [0174.384] AreFileApisANSI () returned 1 [0174.384] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.384] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.384] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\6nq9v8cd.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\6nq9v8cd.txt.cryptoid"), dwFlags=0x2) returned 1 [0174.385] AreFileApisANSI () returned 1 [0174.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0174.386] CloseHandle (hObject=0xb4) returned 1 [0174.387] AreFileApisANSI () returned 1 [0174.387] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0174.387] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0174.387] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0174.388] AreFileApisANSI () returned 1 [0174.388] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.390] CloseHandle (hObject=0xb4) returned 1 [0174.390] AreFileApisANSI () returned 1 [0174.390] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.390] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.390] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\jz1uuup9.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\jz1uuup9.txt.cryptoid"), dwFlags=0x2) returned 1 [0174.392] AreFileApisANSI () returned 1 [0174.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.394] CloseHandle (hObject=0xb4) returned 1 [0174.394] AreFileApisANSI () returned 1 [0174.394] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.394] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.394] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\kw0ulafv.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\kw0ulafv.txt.cryptoid"), dwFlags=0x2) returned 1 [0174.395] AreFileApisANSI () returned 1 [0174.395] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.398] CloseHandle (hObject=0xb4) returned 1 [0174.399] AreFileApisANSI () returned 1 [0174.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.399] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\sw6z4ai1.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\sw6z4ai1.txt.cryptoid"), dwFlags=0x2) returned 1 [0174.400] AreFileApisANSI () returned 1 [0174.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.402] CloseHandle (hObject=0xb4) returned 1 [0174.402] AreFileApisANSI () returned 1 [0174.402] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.402] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.403] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\tu6xbkfe.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\tu6xbkfe.txt.cryptoid"), dwFlags=0x2) returned 1 [0174.404] AreFileApisANSI () returned 1 [0174.404] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.407] CloseHandle (hObject=0xb4) returned 1 [0174.407] AreFileApisANSI () returned 1 [0174.408] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0174.408] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.408] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\u9pt9v3q.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\u9pt9v3q.txt.cryptoid"), dwFlags=0x2) returned 1 [0174.409] AreFileApisANSI () returned 1 [0174.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfaa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0174.412] CloseHandle (hObject=0xb0) returned 1 [0174.412] AreFileApisANSI () returned 1 [0174.412] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4beee8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0174.430] CloseHandle (hObject=0xb0) returned 1 [0174.431] AreFileApisANSI () returned 1 [0174.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf6b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0174.432] CloseHandle (hObject=0xb0) returned 1 [0174.432] AreFileApisANSI () returned 1 [0174.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0174.434] CloseHandle (hObject=0xb4) returned 1 [0174.434] AreFileApisANSI () returned 1 [0174.434] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0174.434] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0174.434] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\history\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\history\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0174.436] AreFileApisANSI () returned 1 [0174.436] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfb68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 142 [0174.438] CloseHandle (hObject=0xb0) returned 1 [0174.438] AreFileApisANSI () returned 1 [0174.438] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 139 [0174.445] CloseHandle (hObject=0xb0) returned 1 [0174.445] AreFileApisANSI () returned 1 [0174.446] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf5f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 142 [0174.448] CloseHandle (hObject=0xb0) returned 1 [0174.449] AreFileApisANSI () returned 1 [0174.449] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0174.450] CloseHandle (hObject=0xb4) returned 1 [0174.450] AreFileApisANSI () returned 1 [0174.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0174.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0174.450] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatcache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatcache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0174.451] AreFileApisANSI () returned 1 [0174.452] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf2d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0174.453] CloseHandle (hObject=0xb0) returned 1 [0174.453] AreFileApisANSI () returned 1 [0174.453] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf2d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 141 [0174.456] CloseHandle (hObject=0xb0) returned 1 [0174.456] AreFileApisANSI () returned 1 [0174.456] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfaa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0174.458] CloseHandle (hObject=0xb0) returned 1 [0174.458] AreFileApisANSI () returned 1 [0174.458] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.459] CloseHandle (hObject=0xb4) returned 1 [0174.459] AreFileApisANSI () returned 1 [0174.459] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0174.459] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49aeb8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0174.459] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatuacache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatuacache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0174.461] AreFileApisANSI () returned 1 [0174.461] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0174.462] CloseHandle (hObject=0xb0) returned 1 [0174.463] AreFileApisANSI () returned 1 [0174.463] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf528, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0174.464] CloseHandle (hObject=0xb0) returned 1 [0174.465] AreFileApisANSI () returned 1 [0174.465] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfb68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0174.468] CloseHandle (hObject=0xb0) returned 1 [0174.468] AreFileApisANSI () returned 1 [0174.468] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf848, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 141 [0174.470] CloseHandle (hObject=0xb4) returned 1 [0174.470] AreFileApisANSI () returned 1 [0174.470] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4beee8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0174.471] CloseHandle (hObject=0xb4) returned 1 [0174.472] AreFileApisANSI () returned 1 [0174.472] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf528, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 141 [0174.482] CloseHandle (hObject=0xb4) returned 1 [0174.483] AreFileApisANSI () returned 1 [0174.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ebe0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0174.484] CloseHandle (hObject=0xb8) returned 1 [0174.485] AreFileApisANSI () returned 1 [0174.485] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 147 [0174.488] CloseHandle (hObject=0xb8) returned 1 [0174.488] AreFileApisANSI () returned 1 [0174.488] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0174.490] CloseHandle (hObject=0xb8) returned 1 [0174.490] AreFileApisANSI () returned 1 [0174.490] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d83e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0174.491] CloseHandle (hObject=0xbc) returned 1 [0174.491] AreFileApisANSI () returned 1 [0174.491] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d83e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0174.491] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49b350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0174.491] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0174.492] AreFileApisANSI () returned 1 [0174.492] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ebe0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0174.494] CloseHandle (hObject=0xbc) returned 1 [0174.494] AreFileApisANSI () returned 1 [0174.494] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f200, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0174.497] CloseHandle (hObject=0xbc) returned 1 [0174.498] AreFileApisANSI () returned 1 [0174.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f200, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0174.499] CloseHandle (hObject=0xbc) returned 1 [0174.500] AreFileApisANSI () returned 1 [0174.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ee80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0174.516] CloseHandle (hObject=0xc0) returned 1 [0174.516] AreFileApisANSI () returned 1 [0174.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ecc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 158 [0174.537] CloseHandle (hObject=0xc0) returned 1 [0174.538] AreFileApisANSI () returned 1 [0174.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0174.540] CloseHandle (hObject=0xc0) returned 1 [0174.540] AreFileApisANSI () returned 1 [0174.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0174.586] CloseHandle (hObject=0xc4) returned 1 [0174.587] AreFileApisANSI () returned 1 [0174.587] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0174.587] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0f00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0174.587] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1ab36a6a[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1ab36a6a[1].js.cryptoid"), dwFlags=0x2) returned 1 [0174.589] AreFileApisANSI () returned 1 [0174.589] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0174.792] CloseHandle (hObject=0xc4) returned 1 [0174.793] AreFileApisANSI () returned 1 [0174.793] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0174.793] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a07d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0174.793] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1acd62c3[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1acd62c3[1].js.cryptoid"), dwFlags=0x2) returned 1 [0174.794] AreFileApisANSI () returned 1 [0174.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0174.817] CloseHandle (hObject=0xc4) returned 1 [0174.818] AreFileApisANSI () returned 1 [0174.818] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0174.818] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0d90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0174.818] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\236a1503[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\236a1503[1].js.cryptoid"), dwFlags=0x2) returned 1 [0174.820] AreFileApisANSI () returned 1 [0174.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0175.070] CloseHandle (hObject=0xc4) returned 1 [0175.071] AreFileApisANSI () returned 1 [0175.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0175.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a09f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0175.071] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\36a8ead3[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\36a8ead3[1].js.cryptoid"), dwFlags=0x2) returned 1 [0175.073] AreFileApisANSI () returned 1 [0175.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0175.130] CloseHandle (hObject=0xc4) returned 1 [0175.131] AreFileApisANSI () returned 1 [0175.131] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0175.131] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0d90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0175.131] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\9101d3f2[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\9101d3f2[1].js.cryptoid"), dwFlags=0x2) returned 1 [0175.133] AreFileApisANSI () returned 1 [0175.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0175.133] CloseHandle (hObject=0xc4) returned 1 [0175.134] AreFileApisANSI () returned 1 [0175.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0175.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 163 [0175.134] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0175.135] AreFileApisANSI () returned 1 [0175.135] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0175.186] CloseHandle (hObject=0xc4) returned 1 [0175.187] AreFileApisANSI () returned 1 [0175.187] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0175.187] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a09f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0175.187] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\d11fd6a0[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\d11fd6a0[1].js.cryptoid"), dwFlags=0x2) returned 1 [0175.190] AreFileApisANSI () returned 1 [0175.190] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0175.283] CloseHandle (hObject=0xc4) returned 1 [0175.284] AreFileApisANSI () returned 1 [0175.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0175.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a07d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0175.284] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f682f456[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f682f456[1].js.cryptoid"), dwFlags=0x2) returned 1 [0175.285] AreFileApisANSI () returned 1 [0175.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0175.398] CloseHandle (hObject=0xc4) returned 1 [0175.398] AreFileApisANSI () returned 1 [0175.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0175.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0cd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0175.398] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\fce27fce[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\fce27fce[1].js.cryptoid"), dwFlags=0x2) returned 1 [0175.400] AreFileApisANSI () returned 1 [0175.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7a80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0175.400] CloseHandle (hObject=0xc0) returned 1 [0175.400] AreFileApisANSI () returned 1 [0175.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d7a80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0175.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0660, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0175.401] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0175.403] AreFileApisANSI () returned 1 [0175.403] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ecc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0175.420] CloseHandle (hObject=0xb8) returned 1 [0175.421] AreFileApisANSI () returned 1 [0175.421] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e5c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 147 [0175.423] CloseHandle (hObject=0xb8) returned 1 [0175.423] AreFileApisANSI () returned 1 [0175.423] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f040, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0175.425] CloseHandle (hObject=0xb8) returned 1 [0175.426] AreFileApisANSI () returned 1 [0175.426] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0175.428] CloseHandle (hObject=0xbc) returned 1 [0175.428] AreFileApisANSI () returned 1 [0175.428] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0175.431] CloseHandle (hObject=0xbc) returned 1 [0175.431] AreFileApisANSI () returned 1 [0175.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0175.459] CloseHandle (hObject=0xbc) returned 1 [0175.460] AreFileApisANSI () returned 1 [0175.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d83e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0175.460] CloseHandle (hObject=0xbc) returned 1 [0175.461] AreFileApisANSI () returned 1 [0175.461] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d83e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0175.461] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49b5f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0175.461] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0175.462] AreFileApisANSI () returned 1 [0175.462] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f3c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0175.463] CloseHandle (hObject=0xbc) returned 1 [0175.464] AreFileApisANSI () returned 1 [0175.464] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0175.467] CloseHandle (hObject=0xbc) returned 1 [0175.467] AreFileApisANSI () returned 1 [0175.467] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0175.468] CloseHandle (hObject=0xbc) returned 1 [0175.469] AreFileApisANSI () returned 1 [0175.469] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0175.470] CloseHandle (hObject=0xbc) returned 1 [0175.471] AreFileApisANSI () returned 1 [0175.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ebe0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0175.472] CloseHandle (hObject=0xbc) returned 1 [0175.472] AreFileApisANSI () returned 1 [0175.472] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0175.486] CloseHandle (hObject=0xbc) returned 1 [0175.487] AreFileApisANSI () returned 1 [0175.487] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f200, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0175.491] CloseHandle (hObject=0xbc) returned 1 [0175.492] AreFileApisANSI () returned 1 [0175.492] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0175.494] CloseHandle (hObject=0xbc) returned 1 [0175.495] AreFileApisANSI () returned 1 [0175.495] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0175.496] CloseHandle (hObject=0xbc) returned 1 [0175.497] AreFileApisANSI () returned 1 [0175.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0175.498] CloseHandle (hObject=0xac) returned 1 [0175.498] AreFileApisANSI () returned 1 [0175.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0175.500] CloseHandle (hObject=0xac) returned 1 [0175.500] AreFileApisANSI () returned 1 [0175.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0175.502] CloseHandle (hObject=0xac) returned 1 [0175.503] AreFileApisANSI () returned 1 [0175.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0175.504] CloseHandle (hObject=0xac) returned 1 [0175.504] AreFileApisANSI () returned 1 [0175.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0175.505] CloseHandle (hObject=0xac) returned 1 [0175.506] AreFileApisANSI () returned 1 [0175.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0175.515] CloseHandle (hObject=0xac) returned 1 [0175.516] AreFileApisANSI () returned 1 [0175.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0175.518] CloseHandle (hObject=0xa8) returned 1 [0175.518] AreFileApisANSI () returned 1 [0175.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0175.522] CloseHandle (hObject=0xa8) returned 1 [0175.522] AreFileApisANSI () returned 1 [0175.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0175.525] CloseHandle (hObject=0xa8) returned 1 [0175.525] AreFileApisANSI () returned 1 [0175.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0175.527] CloseHandle (hObject=0xa8) returned 1 [0175.528] AreFileApisANSI () returned 1 [0175.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0175.529] CloseHandle (hObject=0xa8) returned 1 [0175.529] AreFileApisANSI () returned 1 [0175.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0175.532] CloseHandle (hObject=0xa8) returned 1 [0175.532] AreFileApisANSI () returned 1 [0175.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0175.534] CloseHandle (hObject=0xa8) returned 1 [0175.534] AreFileApisANSI () returned 1 [0175.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0175.535] CloseHandle (hObject=0xa8) returned 1 [0175.536] AreFileApisANSI () returned 1 [0175.536] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0175.547] CloseHandle (hObject=0xa8) returned 1 [0175.548] AreFileApisANSI () returned 1 [0175.548] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0175.550] CloseHandle (hObject=0xa8) returned 1 [0175.551] AreFileApisANSI () returned 1 [0175.551] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0175.552] CloseHandle (hObject=0xa8) returned 1 [0175.552] AreFileApisANSI () returned 1 [0175.552] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0175.553] CloseHandle (hObject=0xa8) returned 1 [0175.554] AreFileApisANSI () returned 1 [0175.554] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf2d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0175.556] CloseHandle (hObject=0xac) returned 1 [0175.556] AreFileApisANSI () returned 1 [0175.556] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0175.560] CloseHandle (hObject=0xac) returned 1 [0175.560] AreFileApisANSI () returned 1 [0175.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf528, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0175.561] CloseHandle (hObject=0xac) returned 1 [0175.562] AreFileApisANSI () returned 1 [0175.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf398, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0175.581] CloseHandle (hObject=0xb0) returned 1 [0175.582] AreFileApisANSI () returned 1 [0175.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0175.583] CloseHandle (hObject=0xb0) returned 1 [0175.583] AreFileApisANSI () returned 1 [0175.583] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0175.587] CloseHandle (hObject=0xb0) returned 1 [0175.588] AreFileApisANSI () returned 1 [0175.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bed58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0175.593] CloseHandle (hObject=0xb0) returned 1 [0175.594] AreFileApisANSI () returned 1 [0175.594] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfaa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 141 [0175.595] CloseHandle (hObject=0xb0) returned 1 [0175.596] AreFileApisANSI () returned 1 [0175.596] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0175.597] CloseHandle (hObject=0xb0) returned 1 [0175.598] AreFileApisANSI () returned 1 [0175.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0175.599] CloseHandle (hObject=0xac) returned 1 [0175.600] AreFileApisANSI () returned 1 [0175.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf2d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0175.602] CloseHandle (hObject=0xac) returned 1 [0175.603] AreFileApisANSI () returned 1 [0175.603] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0175.604] CloseHandle (hObject=0xac) returned 1 [0175.604] AreFileApisANSI () returned 1 [0175.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bee20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0175.606] CloseHandle (hObject=0xb0) returned 1 [0175.607] AreFileApisANSI () returned 1 [0175.607] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4beee8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0175.609] CloseHandle (hObject=0xb0) returned 1 [0175.610] AreFileApisANSI () returned 1 [0175.610] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfc30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0175.611] CloseHandle (hObject=0xb0) returned 1 [0175.612] AreFileApisANSI () returned 1 [0175.612] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 153 [0175.613] CloseHandle (hObject=0xb4) returned 1 [0175.614] AreFileApisANSI () returned 1 [0175.614] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ef60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0175.615] CloseHandle (hObject=0xb4) returned 1 [0175.615] AreFileApisANSI () returned 1 [0175.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 153 [0175.635] CloseHandle (hObject=0xb4) returned 1 [0175.636] AreFileApisANSI () returned 1 [0175.636] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 145 [0175.637] CloseHandle (hObject=0xb4) returned 1 [0175.638] AreFileApisANSI () returned 1 [0175.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfc30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 142 [0175.639] CloseHandle (hObject=0xb4) returned 1 [0175.639] AreFileApisANSI () returned 1 [0175.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf528, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 145 [0175.653] CloseHandle (hObject=0xb4) returned 1 [0175.653] AreFileApisANSI () returned 1 [0175.653] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf398, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 145 [0175.654] CloseHandle (hObject=0xb4) returned 1 [0175.655] AreFileApisANSI () returned 1 [0175.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 142 [0175.656] CloseHandle (hObject=0xb4) returned 1 [0175.656] AreFileApisANSI () returned 1 [0175.656] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf528, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 145 [0175.658] CloseHandle (hObject=0xb4) returned 1 [0175.659] AreFileApisANSI () returned 1 [0175.659] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0175.660] CloseHandle (hObject=0xac) returned 1 [0175.661] AreFileApisANSI () returned 1 [0175.661] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0175.663] CloseHandle (hObject=0xac) returned 1 [0175.663] AreFileApisANSI () returned 1 [0175.663] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0175.675] CloseHandle (hObject=0xac) returned 1 [0175.675] AreFileApisANSI () returned 1 [0175.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bee20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0175.677] CloseHandle (hObject=0xb0) returned 1 [0175.677] AreFileApisANSI () returned 1 [0175.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf398, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0175.679] CloseHandle (hObject=0xb0) returned 1 [0175.680] AreFileApisANSI () returned 1 [0175.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf6b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0175.681] CloseHandle (hObject=0xb0) returned 1 [0175.681] AreFileApisANSI () returned 1 [0175.681] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0175.685] CloseHandle (hObject=0xa8) returned 1 [0175.685] AreFileApisANSI () returned 1 [0175.685] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0175.686] CloseHandle (hObject=0xa8) returned 1 [0175.687] AreFileApisANSI () returned 1 [0175.687] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0175.688] CloseHandle (hObject=0xa8) returned 1 [0175.688] AreFileApisANSI () returned 1 [0175.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0175.689] CloseHandle (hObject=0xac) returned 1 [0175.690] AreFileApisANSI () returned 1 [0175.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf848, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0175.700] CloseHandle (hObject=0xac) returned 1 [0175.700] AreFileApisANSI () returned 1 [0175.700] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bee20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0175.702] CloseHandle (hObject=0xac) returned 1 [0175.702] AreFileApisANSI () returned 1 [0175.702] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0175.702] CloseHandle (hObject=0xb0) returned 1 [0175.703] AreFileApisANSI () returned 1 [0175.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0175.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 142 [0175.703] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\bingpagedatacache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\bingpagedatacache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0175.704] AreFileApisANSI () returned 1 [0175.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0175.705] CloseHandle (hObject=0xac) returned 1 [0175.705] AreFileApisANSI () returned 1 [0175.705] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0175.717] CloseHandle (hObject=0xac) returned 1 [0175.717] AreFileApisANSI () returned 1 [0175.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0175.718] CloseHandle (hObject=0xac) returned 1 [0175.718] AreFileApisANSI () returned 1 [0175.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0175.719] CloseHandle (hObject=0xb0) returned 1 [0175.720] AreFileApisANSI () returned 1 [0175.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0175.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0175.720] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0175.721] AreFileApisANSI () returned 1 [0175.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0175.724] CloseHandle (hObject=0xac) returned 1 [0175.725] AreFileApisANSI () returned 1 [0175.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0175.732] CloseHandle (hObject=0xac) returned 1 [0175.732] AreFileApisANSI () returned 1 [0175.732] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0175.733] CloseHandle (hObject=0xac) returned 1 [0175.734] AreFileApisANSI () returned 1 [0175.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0175.735] CloseHandle (hObject=0xb0) returned 1 [0175.736] AreFileApisANSI () returned 1 [0175.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0175.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0175.736] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1143sfpt.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1143sfpt.txt.cryptoid"), dwFlags=0x2) returned 1 [0175.737] AreFileApisANSI () returned 1 [0175.737] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0175.738] CloseHandle (hObject=0xb0) returned 1 [0175.738] AreFileApisANSI () returned 1 [0175.738] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0175.738] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0175.738] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1hp9xsya.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1hp9xsya.txt.cryptoid"), dwFlags=0x2) returned 1 [0175.739] AreFileApisANSI () returned 1 [0175.739] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0175.741] CloseHandle (hObject=0xb0) returned 1 [0175.741] AreFileApisANSI () returned 1 [0175.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0175.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0175.741] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\205espv2.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\205espv2.txt.cryptoid"), dwFlags=0x2) returned 1 [0175.742] AreFileApisANSI () returned 1 [0175.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0175.743] CloseHandle (hObject=0xb0) returned 1 [0175.743] AreFileApisANSI () returned 1 [0175.743] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0175.743] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0175.743] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0175.744] AreFileApisANSI () returned 1 [0175.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0175.745] CloseHandle (hObject=0xb0) returned 1 [0175.745] AreFileApisANSI () returned 1 [0175.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0175.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0175.746] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\y51ocfz0.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\y51ocfz0.txt.cryptoid"), dwFlags=0x2) returned 1 [0175.746] AreFileApisANSI () returned 1 [0175.746] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf2d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0175.748] CloseHandle (hObject=0xac) returned 1 [0175.748] AreFileApisANSI () returned 1 [0175.748] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bed58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0175.750] CloseHandle (hObject=0xac) returned 1 [0175.750] AreFileApisANSI () returned 1 [0175.750] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf398, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0175.751] CloseHandle (hObject=0xac) returned 1 [0175.752] AreFileApisANSI () returned 1 [0175.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0176.214] CloseHandle (hObject=0xb0) returned 1 [0176.214] AreFileApisANSI () returned 1 [0176.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0176.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0176.214] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cortanaassist\\allowlist.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cortanaassist\\allowlist.dat.cryptoid"), dwFlags=0x2) returned 1 [0176.216] AreFileApisANSI () returned 1 [0176.216] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0176.218] CloseHandle (hObject=0xac) returned 1 [0176.219] AreFileApisANSI () returned 1 [0176.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0176.222] CloseHandle (hObject=0xac) returned 1 [0176.222] AreFileApisANSI () returned 1 [0176.222] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0176.224] CloseHandle (hObject=0xac) returned 1 [0176.224] AreFileApisANSI () returned 1 [0176.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0176.225] CloseHandle (hObject=0xb0) returned 1 [0176.225] AreFileApisANSI () returned 1 [0176.225] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0176.225] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0176.225] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0176.227] AreFileApisANSI () returned 1 [0176.227] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf208, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0176.229] CloseHandle (hObject=0xac) returned 1 [0176.230] AreFileApisANSI () returned 1 [0176.230] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf398, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0176.245] CloseHandle (hObject=0xac) returned 1 [0176.246] AreFileApisANSI () returned 1 [0176.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0176.247] CloseHandle (hObject=0xac) returned 1 [0176.248] AreFileApisANSI () returned 1 [0176.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0176.249] CloseHandle (hObject=0xb0) returned 1 [0176.249] AreFileApisANSI () returned 1 [0176.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0176.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0176.249] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0176.253] AreFileApisANSI () returned 1 [0176.253] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bfb68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0176.255] CloseHandle (hObject=0xac) returned 1 [0176.256] AreFileApisANSI () returned 1 [0176.256] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf460, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0176.259] CloseHandle (hObject=0xac) returned 1 [0176.260] AreFileApisANSI () returned 1 [0176.260] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf6b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0176.261] CloseHandle (hObject=0xac) returned 1 [0176.262] AreFileApisANSI () returned 1 [0176.262] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0176.263] CloseHandle (hObject=0xb0) returned 1 [0176.264] AreFileApisANSI () returned 1 [0176.264] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0176.264] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0176.264] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0176.266] AreFileApisANSI () returned 1 [0176.266] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf398, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 139 [0176.268] CloseHandle (hObject=0xac) returned 1 [0176.269] AreFileApisANSI () returned 1 [0176.269] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf2d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0176.272] CloseHandle (hObject=0xac) returned 1 [0176.273] AreFileApisANSI () returned 1 [0176.273] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bed58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 139 [0176.275] CloseHandle (hObject=0xac) returned 1 [0176.276] AreFileApisANSI () returned 1 [0176.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0176.277] CloseHandle (hObject=0xb0) returned 1 [0176.277] AreFileApisANSI () returned 1 [0176.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0176.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 141 [0176.277] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ieflipaheadcache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ieflipaheadcache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0176.279] AreFileApisANSI () returned 1 [0176.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0176.281] CloseHandle (hObject=0xac) returned 1 [0176.281] AreFileApisANSI () returned 1 [0176.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0176.284] CloseHandle (hObject=0xac) returned 1 [0176.284] AreFileApisANSI () returned 1 [0176.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0176.308] CloseHandle (hObject=0xac) returned 1 [0176.309] AreFileApisANSI () returned 1 [0176.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0176.310] CloseHandle (hObject=0xac) returned 1 [0176.311] AreFileApisANSI () returned 1 [0176.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0176.313] CloseHandle (hObject=0xac) returned 1 [0176.314] AreFileApisANSI () returned 1 [0176.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0176.320] CloseHandle (hObject=0xac) returned 1 [0176.320] AreFileApisANSI () returned 1 [0176.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bee20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0176.324] CloseHandle (hObject=0xb0) returned 1 [0176.324] AreFileApisANSI () returned 1 [0176.324] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf2d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0176.325] CloseHandle (hObject=0xb0) returned 1 [0176.326] AreFileApisANSI () returned 1 [0176.326] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf398, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0176.327] CloseHandle (hObject=0xb0) returned 1 [0176.329] AreFileApisANSI () returned 1 [0176.329] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 145 [0176.334] CloseHandle (hObject=0xb4) returned 1 [0176.335] AreFileApisANSI () returned 1 [0176.335] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf208, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 142 [0176.351] CloseHandle (hObject=0xb4) returned 1 [0176.351] AreFileApisANSI () returned 1 [0176.351] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4beee8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 145 [0176.353] CloseHandle (hObject=0xb4) returned 1 [0176.354] AreFileApisANSI () returned 1 [0176.354] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0176.355] CloseHandle (hObject=0xb8) returned 1 [0176.356] AreFileApisANSI () returned 1 [0176.356] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 147 [0176.357] CloseHandle (hObject=0xb8) returned 1 [0176.358] AreFileApisANSI () returned 1 [0176.358] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ea20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0176.362] CloseHandle (hObject=0xb8) returned 1 [0176.362] AreFileApisANSI () returned 1 [0176.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 158 [0176.364] CloseHandle (hObject=0xbc) returned 1 [0176.364] AreFileApisANSI () returned 1 [0176.364] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0176.366] CloseHandle (hObject=0xbc) returned 1 [0176.366] AreFileApisANSI () returned 1 [0176.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 158 [0176.370] CloseHandle (hObject=0xbc) returned 1 [0176.371] AreFileApisANSI () returned 1 [0176.371] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 170 [0176.373] CloseHandle (hObject=0xc0) returned 1 [0176.374] AreFileApisANSI () returned 1 [0176.374] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0176.377] CloseHandle (hObject=0xc0) returned 1 [0176.378] AreFileApisANSI () returned 1 [0176.378] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 170 [0176.379] CloseHandle (hObject=0xc0) returned 1 [0176.380] AreFileApisANSI () returned 1 [0176.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 178 [0176.382] CloseHandle (hObject=0xc4) returned 1 [0176.383] AreFileApisANSI () returned 1 [0176.383] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0176.394] CloseHandle (hObject=0xc4) returned 1 [0176.395] AreFileApisANSI () returned 1 [0176.395] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 178 [0176.396] CloseHandle (hObject=0xc4) returned 1 [0176.397] AreFileApisANSI () returned 1 [0176.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4965e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 187 [0176.400] CloseHandle (hObject=0xc8) returned 1 [0176.401] AreFileApisANSI () returned 1 [0176.401] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496700, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 184 [0176.403] CloseHandle (hObject=0xc8) returned 1 [0176.403] AreFileApisANSI () returned 1 [0176.403] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496d90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 187 [0176.405] CloseHandle (hObject=0xc8) returned 1 [0176.406] AreFileApisANSI () returned 1 [0176.406] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d67c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0177.164] CloseHandle (hObject=0xc8) returned 1 [0177.164] AreFileApisANSI () returned 1 [0177.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d67c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0177.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4bf2d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 178 [0177.164] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb.cryptoid"), dwFlags=0x2) returned 1 [0177.166] AreFileApisANSI () returned 1 [0177.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 153 [0177.167] CloseHandle (hObject=0xb8) returned 1 [0177.168] AreFileApisANSI () returned 1 [0177.168] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f3c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0177.169] CloseHandle (hObject=0xb8) returned 1 [0177.169] AreFileApisANSI () returned 1 [0177.169] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 153 [0177.172] CloseHandle (hObject=0xb8) returned 1 [0177.173] AreFileApisANSI () returned 1 [0177.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ebe0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 158 [0177.174] CloseHandle (hObject=0xbc) returned 1 [0177.175] AreFileApisANSI () returned 1 [0177.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e6a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0177.176] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7214, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0177.176] GetFileType (hFile=0xbc) returned 0x1 [0177.176] WriteFile (in: hFile=0xbc, lpBuffer=0x3d5ec0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d5eb8, lpOverlapped=0x0 | out: lpBuffer=0x3d5ec0*, lpNumberOfBytesWritten=0x3d5eb8*=0x423, lpOverlapped=0x0) returned 1 [0177.177] CloseHandle (hObject=0xbc) returned 1 [0177.178] AreFileApisANSI () returned 1 [0177.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f3c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 158 [0177.178] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7214, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0177.186] GetFileType (hFile=0xbc) returned 0x1 [0177.186] WriteFile (in: hFile=0xbc, lpBuffer=0x3d5ec0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d5eb8, lpOverlapped=0x0 | out: lpBuffer=0x3d5ec0*, lpNumberOfBytesWritten=0x3d5eb8*=0x423, lpOverlapped=0x0) returned 1 [0177.187] CloseHandle (hObject=0xbc) returned 1 [0177.187] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\*", lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 0x494b20 [0177.187] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 1 [0177.187] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 1 [0177.188] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 1 [0177.188] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 1 [0177.188] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 1 [0177.188] AreFileApisANSI () returned 1 [0177.188] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0177.188] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\nouser1\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d68b4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0177.188] GetFileType (hFile=0xc0) returned 0x1 [0177.189] WriteFile (in: hFile=0xc0, lpBuffer=0x3d5560*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d5558, lpOverlapped=0x0 | out: lpBuffer=0x3d5560*, lpNumberOfBytesWritten=0x3d5558*=0x423, lpOverlapped=0x0) returned 1 [0177.189] CloseHandle (hObject=0xc0) returned 1 [0177.190] AreFileApisANSI () returned 1 [0177.190] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 163 [0177.190] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\nouser1\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d68b4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0177.190] GetFileType (hFile=0xc0) returned 0x1 [0177.190] WriteFile (in: hFile=0xc0, lpBuffer=0x3d5560*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d5558, lpOverlapped=0x0 | out: lpBuffer=0x3d5560*, lpNumberOfBytesWritten=0x3d5558*=0x423, lpOverlapped=0x0) returned 1 [0177.191] CloseHandle (hObject=0xc0) returned 1 [0177.192] AreFileApisANSI () returned 1 [0177.192] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0177.192] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\nouser1\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d68b4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0177.194] GetFileType (hFile=0xc0) returned 0x1 [0177.194] WriteFile (in: hFile=0xc0, lpBuffer=0x3d5560*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d5558, lpOverlapped=0x0 | out: lpBuffer=0x3d5560*, lpNumberOfBytesWritten=0x3d5558*=0x423, lpOverlapped=0x0) returned 1 [0177.195] CloseHandle (hObject=0xc0) returned 1 [0177.196] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\*", lpFindFileData=0x3d6be0 | out: lpFindFileData=0x3d6be0) returned 0x494fe0 [0177.196] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3d6be0 | out: lpFindFileData=0x3d6be0) returned 1 [0177.196] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3d6be0 | out: lpFindFileData=0x3d6be0) returned 1 [0177.196] AreFileApisANSI () returned 1 [0177.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 178 [0177.196] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\nouser1\\120712-0049\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d5f54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4 [0177.197] GetFileType (hFile=0xc4) returned 0x1 [0177.197] WriteFile (in: hFile=0xc4, lpBuffer=0x3d4c00*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d4bf8, lpOverlapped=0x0 | out: lpBuffer=0x3d4c00*, lpNumberOfBytesWritten=0x3d4bf8*=0x423, lpOverlapped=0x0) returned 1 [0177.198] CloseHandle (hObject=0xc4) returned 1 [0177.198] AreFileApisANSI () returned 1 [0177.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0177.198] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\nouser1\\120712-0049\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d5f54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4 [0177.199] GetFileType (hFile=0xc4) returned 0x1 [0177.199] WriteFile (in: hFile=0xc4, lpBuffer=0x3d4c00*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d4bf8, lpOverlapped=0x0 | out: lpBuffer=0x3d4c00*, lpNumberOfBytesWritten=0x3d4bf8*=0x423, lpOverlapped=0x0) returned 1 [0177.200] CloseHandle (hObject=0xc4) returned 1 [0177.200] AreFileApisANSI () returned 1 [0177.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 178 [0177.200] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\nouser1\\120712-0049\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d5f54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4 [0177.203] GetFileType (hFile=0xc4) returned 0x1 [0177.203] WriteFile (in: hFile=0xc4, lpBuffer=0x3d4c00*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d4bf8, lpOverlapped=0x0 | out: lpBuffer=0x3d4c00*, lpNumberOfBytesWritten=0x3d4bf8*=0x423, lpOverlapped=0x0) returned 1 [0177.204] CloseHandle (hObject=0xc4) returned 1 [0177.205] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049\\*", lpFindFileData=0x3d6280 | out: lpFindFileData=0x3d6280) returned 0x494b60 [0177.205] FindNextFileA (in: hFindFile=0x494b60, lpFindFileData=0x3d6280 | out: lpFindFileData=0x3d6280) returned 1 [0177.205] FindNextFileA (in: hFindFile=0x494b60, lpFindFileData=0x3d6280 | out: lpFindFileData=0x3d6280) returned 1 [0177.205] FindNextFileA (in: hFindFile=0x494b60, lpFindFileData=0x3d6280 | out: lpFindFileData=0x3d6280) returned 1 [0177.205] FindNextFileA (in: hFindFile=0x494b60, lpFindFileData=0x3d6280 | out: lpFindFileData=0x3d6280) returned 1 [0177.205] FindNextFileA (in: hFindFile=0x494b60, lpFindFileData=0x3d6280 | out: lpFindFileData=0x3d6280) returned 0 [0177.205] FindClose (in: hFindFile=0x494b60 | out: hFindFile=0x494b60) returned 1 [0177.206] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3d6be0 | out: lpFindFileData=0x3d6be0) returned 1 [0177.206] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3d6be0 | out: lpFindFileData=0x3d6be0) returned 1 [0177.206] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3d6be0 | out: lpFindFileData=0x3d6be0) returned 1 [0177.206] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3d6be0 | out: lpFindFileData=0x3d6be0) returned 0 [0177.206] FindClose (in: hFindFile=0x494fe0 | out: hFindFile=0x494fe0) returned 1 [0177.206] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 0 [0177.206] FindClose (in: hFindFile=0x494b20 | out: hFindFile=0x494b20) returned 1 [0177.207] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 0 [0177.207] FindClose (in: hFindFile=0x494de0 | out: hFindFile=0x494de0) returned 1 [0177.207] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0 [0177.207] FindClose (in: hFindFile=0x494ce0 | out: hFindFile=0x494ce0) returned 1 [0177.207] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0177.207] AreFileApisANSI () returned 1 [0177.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5838, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0177.207] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.208] GetFileType (hFile=0xb4) returned 0x1 [0177.208] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.209] CloseHandle (hObject=0xb4) returned 1 [0177.210] AreFileApisANSI () returned 1 [0177.210] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 145 [0177.210] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.213] GetFileType (hFile=0xb4) returned 0x1 [0177.213] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.214] CloseHandle (hObject=0xb4) returned 1 [0177.214] AreFileApisANSI () returned 1 [0177.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0177.214] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.215] GetFileType (hFile=0xb4) returned 0x1 [0177.215] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.216] CloseHandle (hObject=0xb4) returned 1 [0177.217] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\*", lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0x494c60 [0177.217] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.217] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.217] AreFileApisANSI () returned 1 [0177.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d8d40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 141 [0177.217] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8498, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0177.219] GetFileType (hFile=0xb8) returned 0x1 [0177.219] SetFilePointerEx (in: hFile=0xb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8548 | out: lpNewFilePointer=0x0) returned 1 [0177.219] SetFilePointerEx (in: hFile=0xb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d84fc | out: lpNewFilePointer=0x0) returned 1 [0177.219] SetFilePointerEx (in: hFile=0xb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d852c | out: lpNewFilePointer=0x0) returned 1 [0177.219] SetFilePointerEx (in: hFile=0xb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8520 | out: lpNewFilePointer=0x0) returned 1 [0177.219] SetFilePointerEx (in: hFile=0xb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d84e4 | out: lpNewFilePointer=0x0) returned 1 [0177.219] SetFilePointerEx (in: hFile=0xb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d852c | out: lpNewFilePointer=0x0) returned 1 [0177.219] CloseHandle (hObject=0xb8) returned 1 [0177.220] AreFileApisANSI () returned 1 [0177.220] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d8d40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 141 [0177.220] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49b9e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0177.220] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0177.221] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.221] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.221] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.221] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0 [0177.221] FindClose (in: hFindFile=0x494c60 | out: hFindFile=0x494c60) returned 1 [0177.222] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0177.222] AreFileApisANSI () returned 1 [0177.222] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 153 [0177.222] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\domainsuggestions\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.223] GetFileType (hFile=0xb4) returned 0x1 [0177.223] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.224] CloseHandle (hObject=0xb4) returned 1 [0177.225] AreFileApisANSI () returned 1 [0177.225] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ebe0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 150 [0177.225] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\domainsuggestions\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.227] GetFileType (hFile=0xb4) returned 0x1 [0177.227] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.228] CloseHandle (hObject=0xb4) returned 1 [0177.229] AreFileApisANSI () returned 1 [0177.229] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 153 [0177.229] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\domainsuggestions\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.230] GetFileType (hFile=0xb4) returned 0x1 [0177.230] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.231] CloseHandle (hObject=0xb4) returned 1 [0177.231] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\*", lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0x494d20 [0177.232] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.232] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.232] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.232] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.232] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.232] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0 [0177.232] FindClose (in: hFindFile=0x494d20 | out: hFindFile=0x494d20) returned 1 [0177.232] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0177.232] AreFileApisANSI () returned 1 [0177.232] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0177.233] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.233] GetFileType (hFile=0xb4) returned 0x1 [0177.233] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.234] CloseHandle (hObject=0xb4) returned 1 [0177.235] AreFileApisANSI () returned 1 [0177.235] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0177.235] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.239] GetFileType (hFile=0xb4) returned 0x1 [0177.239] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.240] CloseHandle (hObject=0xb4) returned 1 [0177.241] AreFileApisANSI () returned 1 [0177.241] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e5c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0177.241] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.242] GetFileType (hFile=0xb4) returned 0x1 [0177.242] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.243] CloseHandle (hObject=0xb4) returned 1 [0177.243] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\*", lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0x494c60 [0177.243] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.244] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.244] AreFileApisANSI () returned 1 [0177.244] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d8d40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0177.244] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8498, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0177.245] GetFileType (hFile=0xb8) returned 0x1 [0177.245] SetFilePointerEx (in: hFile=0xb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8548 | out: lpNewFilePointer=0x0) returned 1 [0177.245] SetFilePointerEx (in: hFile=0xb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d84fc | out: lpNewFilePointer=0x0) returned 1 [0177.245] SetFilePointerEx (in: hFile=0xb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d852c | out: lpNewFilePointer=0x0) returned 1 [0177.245] SetFilePointerEx (in: hFile=0xb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d8520 | out: lpNewFilePointer=0x0) returned 1 [0177.246] SetFilePointerEx (in: hFile=0xb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d84e4 | out: lpNewFilePointer=0x0) returned 1 [0177.246] SetFilePointerEx (in: hFile=0xb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d852c | out: lpNewFilePointer=0x0) returned 1 [0177.246] CloseHandle (hObject=0xb8) returned 1 [0177.246] AreFileApisANSI () returned 1 [0177.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d8d40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0177.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49acc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 153 [0177.246] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0177.248] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.248] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.248] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.248] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0 [0177.248] FindClose (in: hFindFile=0x494c60 | out: hFindFile=0x494c60) returned 1 [0177.248] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0177.248] AreFileApisANSI () returned 1 [0177.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a55e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 145 [0177.248] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\favorites\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.249] GetFileType (hFile=0xb4) returned 0x1 [0177.249] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.250] CloseHandle (hObject=0xb4) returned 1 [0177.251] AreFileApisANSI () returned 1 [0177.251] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 142 [0177.251] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\favorites\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.252] GetFileType (hFile=0xb4) returned 0x1 [0177.252] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.253] CloseHandle (hObject=0xb4) returned 1 [0177.254] AreFileApisANSI () returned 1 [0177.254] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 145 [0177.254] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\favorites\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.257] GetFileType (hFile=0xb4) returned 0x1 [0177.257] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.258] CloseHandle (hObject=0xb4) returned 1 [0177.258] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites\\*", lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0x494da0 [0177.259] FindNextFileA (in: hFindFile=0x494da0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.259] FindNextFileA (in: hFindFile=0x494da0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.259] FindNextFileA (in: hFindFile=0x494da0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.259] FindNextFileA (in: hFindFile=0x494da0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.259] FindNextFileA (in: hFindFile=0x494da0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0 [0177.259] FindClose (in: hFindFile=0x494da0 | out: hFindFile=0x494da0) returned 1 [0177.259] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0177.259] AreFileApisANSI () returned 1 [0177.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0177.259] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\imagestore\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.260] GetFileType (hFile=0xb4) returned 0x1 [0177.260] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.261] CloseHandle (hObject=0xb4) returned 1 [0177.262] AreFileApisANSI () returned 1 [0177.262] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0177.262] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\imagestore\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.264] GetFileType (hFile=0xb4) returned 0x1 [0177.264] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.265] CloseHandle (hObject=0xb4) returned 1 [0177.265] AreFileApisANSI () returned 1 [0177.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0177.265] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\imagestore\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.266] GetFileType (hFile=0xb4) returned 0x1 [0177.266] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.267] CloseHandle (hObject=0xb4) returned 1 [0177.268] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\*", lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0x494ee0 [0177.268] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.268] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.268] AreFileApisANSI () returned 1 [0177.268] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ecc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0177.268] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\imagestore\\6zes7lw\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0177.270] GetFileType (hFile=0xb8) returned 0x1 [0177.270] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0177.271] CloseHandle (hObject=0xb8) returned 1 [0177.271] AreFileApisANSI () returned 1 [0177.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ebe0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0177.271] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\imagestore\\6zes7lw\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0177.272] GetFileType (hFile=0xb8) returned 0x1 [0177.272] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0177.273] CloseHandle (hObject=0xb8) returned 1 [0177.273] AreFileApisANSI () returned 1 [0177.274] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0177.274] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\imagestore\\6zes7lw\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0177.276] GetFileType (hFile=0xb8) returned 0x1 [0177.276] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0177.277] CloseHandle (hObject=0xb8) returned 1 [0177.277] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw\\*", lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 0x494aa0 [0177.278] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0177.278] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0177.278] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0177.278] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0177.278] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 0 [0177.278] FindClose (in: hFindFile=0x494aa0 | out: hFindFile=0x494aa0) returned 1 [0177.278] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.278] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.278] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.278] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0 [0177.278] FindClose (in: hFindFile=0x494ee0 | out: hFindFile=0x494ee0) returned 1 [0177.279] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0177.279] AreFileApisANSI () returned 1 [0177.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0177.279] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.280] GetFileType (hFile=0xb4) returned 0x1 [0177.280] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.280] CloseHandle (hObject=0xb4) returned 1 [0177.281] AreFileApisANSI () returned 1 [0177.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 141 [0177.281] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.282] GetFileType (hFile=0xb4) returned 0x1 [0177.282] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.283] CloseHandle (hObject=0xb4) returned 1 [0177.283] AreFileApisANSI () returned 1 [0177.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0177.283] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0177.295] GetFileType (hFile=0xb4) returned 0x1 [0177.295] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0177.296] CloseHandle (hObject=0xb4) returned 1 [0177.296] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\*", lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0x494960 [0177.297] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.297] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0177.297] AreFileApisANSI () returned 1 [0177.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f3c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0177.297] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0177.306] GetFileType (hFile=0xb8) returned 0x1 [0177.306] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0177.307] CloseHandle (hObject=0xb8) returned 1 [0177.308] AreFileApisANSI () returned 1 [0177.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eda0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0177.308] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0177.309] GetFileType (hFile=0xb8) returned 0x1 [0177.309] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0177.310] CloseHandle (hObject=0xb8) returned 1 [0177.310] AreFileApisANSI () returned 1 [0177.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ee80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0177.310] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0177.311] GetFileType (hFile=0xb8) returned 0x1 [0177.311] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0177.313] CloseHandle (hObject=0xb8) returned 1 [0177.313] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\*", lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 0x494c60 [0177.313] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0177.313] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0177.314] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0177.314] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0177.314] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0177.314] AreFileApisANSI () returned 1 [0177.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d83e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 187 [0177.314] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{3d88d67f-6818-11e7-9bd3-c40142ecde47}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b38, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0177.316] GetFileType (hFile=0xbc) returned 0x1 [0177.316] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be8 | out: lpNewFilePointer=0x0) returned 1 [0177.317] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b9c | out: lpNewFilePointer=0x0) returned 1 [0177.317] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bcc | out: lpNewFilePointer=0x0) returned 1 [0177.317] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.317] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.317] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bcc | out: lpNewFilePointer=0x0) returned 1 [0177.317] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.317] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.317] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0x1000, lpOverlapped=0x0) returned 1 [0177.325] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.326] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.326] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.326] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.326] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.326] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.326] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.326] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xff8, lpOverlapped=0x0) returned 1 [0177.326] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.327] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.327] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.327] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.327] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.327] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.327] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.327] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.327] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.327] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xff0, lpOverlapped=0x0) returned 1 [0177.328] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.328] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.328] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.328] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.328] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.328] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.328] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.329] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.329] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.329] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xfe8, lpOverlapped=0x0) returned 1 [0177.329] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.329] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.329] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.329] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.329] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.329] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.329] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.330] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.330] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.330] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xfe0, lpOverlapped=0x0) returned 1 [0177.330] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.330] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.330] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.330] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.330] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.330] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.330] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.331] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.331] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.331] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xfd8, lpOverlapped=0x0) returned 1 [0177.331] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.331] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.331] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.331] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.331] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.332] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.332] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.332] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.332] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.332] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xfd0, lpOverlapped=0x0) returned 1 [0177.332] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.332] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.333] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.333] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.333] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.333] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.333] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.333] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.333] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.333] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xfc8, lpOverlapped=0x0) returned 1 [0177.333] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.333] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.334] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.334] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.334] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.334] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.334] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.334] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.334] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.334] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xfc0, lpOverlapped=0x0) returned 1 [0177.334] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.334] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.335] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.335] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.335] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.335] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.335] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.335] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.335] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.335] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xfb8, lpOverlapped=0x0) returned 1 [0177.335] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.336] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.336] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.336] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.336] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.336] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.336] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.336] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.336] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.336] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xfb0, lpOverlapped=0x0) returned 1 [0177.336] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.337] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.337] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.337] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.337] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.337] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.337] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.337] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.337] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.337] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xfa8, lpOverlapped=0x0) returned 1 [0177.337] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.338] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.338] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.338] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.338] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.338] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.338] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.338] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.338] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.338] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xfa0, lpOverlapped=0x0) returned 1 [0177.338] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.339] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.339] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.339] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.339] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.339] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.339] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.339] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.339] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.339] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf98, lpOverlapped=0x0) returned 1 [0177.340] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.340] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.340] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.340] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.340] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.340] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.340] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.340] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.340] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.340] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf90, lpOverlapped=0x0) returned 1 [0177.341] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.341] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.341] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.341] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.341] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.341] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.341] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.341] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.341] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.341] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf88, lpOverlapped=0x0) returned 1 [0177.342] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.342] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.342] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.342] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.342] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.342] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.342] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.342] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.342] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.342] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf80, lpOverlapped=0x0) returned 1 [0177.343] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.343] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.343] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.343] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.343] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.343] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.343] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.343] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.343] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.343] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf78, lpOverlapped=0x0) returned 1 [0177.344] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.344] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.344] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.344] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.344] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.344] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.344] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.344] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.344] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.344] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf70, lpOverlapped=0x0) returned 1 [0177.344] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.345] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.345] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.345] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.345] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.345] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.345] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.345] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.345] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.345] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf68, lpOverlapped=0x0) returned 1 [0177.345] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.346] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.346] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.346] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.346] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.346] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.346] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.346] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.346] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.346] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf60, lpOverlapped=0x0) returned 1 [0177.346] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.347] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.347] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.347] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.347] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.347] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.347] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.347] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.348] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.348] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf58, lpOverlapped=0x0) returned 1 [0177.348] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.348] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.348] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.348] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.348] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.348] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.348] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.348] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.349] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.349] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf50, lpOverlapped=0x0) returned 1 [0177.349] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.349] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.349] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.349] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.349] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.349] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.349] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.349] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.350] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.350] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf48, lpOverlapped=0x0) returned 1 [0177.350] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.350] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.350] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.350] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.350] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.350] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.350] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.350] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.351] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.351] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf40, lpOverlapped=0x0) returned 1 [0177.351] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.351] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.351] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.351] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.351] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.351] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.351] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.351] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.352] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.352] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf38, lpOverlapped=0x0) returned 1 [0177.352] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.352] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.352] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.352] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.352] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.352] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.352] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.352] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.353] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.353] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf30, lpOverlapped=0x0) returned 1 [0177.353] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.353] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.353] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.353] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.353] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.353] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.353] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.353] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.354] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.354] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf28, lpOverlapped=0x0) returned 1 [0177.354] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.354] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.354] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.354] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.354] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.354] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.354] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.354] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.355] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.355] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf20, lpOverlapped=0x0) returned 1 [0177.355] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.355] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.355] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.355] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.355] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.355] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.355] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.356] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.356] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.356] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf18, lpOverlapped=0x0) returned 1 [0177.356] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.356] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.356] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.356] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b98 | out: lpNewFilePointer=0x0) returned 1 [0177.356] WriteFile (in: hFile=0xbc, lpBuffer=0x4b6da8*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesWritten=0x3d7b64*=0x8, lpOverlapped=0x0) returned 1 [0177.356] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bc0 | out: lpNewFilePointer=0x0) returned 1 [0177.356] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b54 | out: lpNewFilePointer=0x0) returned 1 [0177.357] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd0 | out: lpNewFilePointer=0x0) returned 1 [0177.357] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b84 | out: lpNewFilePointer=0x0) returned 1 [0177.357] ReadFile (in: hFile=0xbc, lpBuffer=0x4b6da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3d7b64, lpOverlapped=0x0 | out: lpBuffer=0x4b6da8*, lpNumberOfBytesRead=0x3d7b64*=0xf10, lpOverlapped=0x0) returned 1 [0177.357] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7bd4 | out: lpNewFilePointer=0x0) returned 1 [0177.357] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7b68 | out: lpNewFilePointer=0x0) returned 1 [0177.357] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3d7be4 | out: lpNewFilePointer=0x0) returned 1 [0177.362] CloseHandle (hObject=0xbc) returned 1 [0177.368] AreFileApisANSI () returned 1 [0177.368] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d83e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 187 [0177.368] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 196 [0177.368] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{3d88d67f-6818-11e7-9bd3-c40142ecde47}.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{3d88d67f-6818-11e7-9bd3-c40142ecde47}.dat.cryptoid"), dwFlags=0x2) returned 1 [0177.369] AreFileApisANSI () returned 1 [0177.369] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d83e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 173 [0177.385] CloseHandle (hObject=0xbc) returned 1 [0177.386] AreFileApisANSI () returned 1 [0177.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d83e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 173 [0177.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5838, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 182 [0177.386] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{3d88d681-6818-11e7-9bd3-c40142ecde47}.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{3d88d681-6818-11e7-9bd3-c40142ecde47}.dat.cryptoid"), dwFlags=0x2) returned 1 [0177.388] AreFileApisANSI () returned 1 [0177.388] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0177.389] CloseHandle (hObject=0xa8) returned 1 [0177.390] AreFileApisANSI () returned 1 [0177.390] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0177.391] CloseHandle (hObject=0xa8) returned 1 [0177.392] AreFileApisANSI () returned 1 [0177.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0177.394] CloseHandle (hObject=0xa8) returned 1 [0177.395] AreFileApisANSI () returned 1 [0177.395] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0177.397] CloseHandle (hObject=0xa4) returned 1 [0177.398] AreFileApisANSI () returned 1 [0177.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0177.400] CloseHandle (hObject=0xa4) returned 1 [0177.400] AreFileApisANSI () returned 1 [0177.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0177.403] CloseHandle (hObject=0xa4) returned 1 [0177.404] AreFileApisANSI () returned 1 [0177.404] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0177.406] CloseHandle (hObject=0xa8) returned 1 [0177.407] AreFileApisANSI () returned 1 [0177.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0177.409] CloseHandle (hObject=0xa8) returned 1 [0177.409] AreFileApisANSI () returned 1 [0177.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0177.413] CloseHandle (hObject=0xa8) returned 1 [0177.414] AreFileApisANSI () returned 1 [0177.414] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0177.415] CloseHandle (hObject=0xac) returned 1 [0177.416] AreFileApisANSI () returned 1 [0177.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0177.418] CloseHandle (hObject=0xac) returned 1 [0177.418] AreFileApisANSI () returned 1 [0177.418] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0177.425] CloseHandle (hObject=0xac) returned 1 [0177.444] AreFileApisANSI () returned 1 [0177.444] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5838, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0177.460] CloseHandle (hObject=0xb0) returned 1 [0177.460] AreFileApisANSI () returned 1 [0177.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5838, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0177.462] CloseHandle (hObject=0xb0) returned 1 [0177.462] AreFileApisANSI () returned 1 [0177.462] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0177.464] CloseHandle (hObject=0xb0) returned 1 [0177.464] AreFileApisANSI () returned 1 [0177.464] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0179.577] CloseHandle (hObject=0xb4) returned 1 [0179.577] AreFileApisANSI () returned 1 [0179.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0179.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 139 [0179.577] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb.cryptoid"), dwFlags=0x2) returned 1 [0179.578] AreFileApisANSI () returned 1 [0179.579] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0179.579] CloseHandle (hObject=0xa4) returned 1 [0179.580] AreFileApisANSI () returned 1 [0179.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0179.581] CloseHandle (hObject=0xa4) returned 1 [0179.581] AreFileApisANSI () returned 1 [0179.581] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0179.584] CloseHandle (hObject=0xa4) returned 1 [0179.584] AreFileApisANSI () returned 1 [0179.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0179.585] CloseHandle (hObject=0xa4) returned 1 [0179.585] AreFileApisANSI () returned 1 [0179.585] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0179.587] CloseHandle (hObject=0xa4) returned 1 [0179.588] AreFileApisANSI () returned 1 [0179.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0179.588] CloseHandle (hObject=0xa4) returned 1 [0179.589] AreFileApisANSI () returned 1 [0179.589] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0179.590] CloseHandle (hObject=0xa8) returned 1 [0179.590] AreFileApisANSI () returned 1 [0179.590] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0179.591] CloseHandle (hObject=0xa8) returned 1 [0179.591] AreFileApisANSI () returned 1 [0179.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0179.607] CloseHandle (hObject=0xa8) returned 1 [0179.607] AreFileApisANSI () returned 1 [0179.607] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0179.610] CloseHandle (hObject=0xa4) returned 1 [0179.610] AreFileApisANSI () returned 1 [0179.610] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0179.611] CloseHandle (hObject=0xa4) returned 1 [0179.611] AreFileApisANSI () returned 1 [0179.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0179.612] CloseHandle (hObject=0xa4) returned 1 [0179.613] AreFileApisANSI () returned 1 [0179.613] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1610, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 185 [0179.616] CloseHandle (hObject=0xa8) returned 1 [0179.617] AreFileApisANSI () returned 1 [0179.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1db8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 182 [0179.618] CloseHandle (hObject=0xa8) returned 1 [0179.618] AreFileApisANSI () returned 1 [0179.618] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a14f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 185 [0179.620] CloseHandle (hObject=0xa8) returned 1 [0179.620] AreFileApisANSI () returned 1 [0179.620] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 184 [0179.719] CloseHandle (hObject=0xac) returned 1 [0179.720] AreFileApisANSI () returned 1 [0179.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 184 [0179.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 193 [0179.720] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0179.722] AreFileApisANSI () returned 1 [0179.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0179.723] CloseHandle (hObject=0xa4) returned 1 [0179.724] AreFileApisANSI () returned 1 [0179.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0179.725] CloseHandle (hObject=0xa4) returned 1 [0179.725] AreFileApisANSI () returned 1 [0179.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0179.750] CloseHandle (hObject=0xa4) returned 1 [0179.751] AreFileApisANSI () returned 1 [0179.751] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0179.770] CloseHandle (hObject=0xa4) returned 1 [0179.771] AreFileApisANSI () returned 1 [0179.771] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0179.772] CloseHandle (hObject=0xa4) returned 1 [0179.773] AreFileApisANSI () returned 1 [0179.773] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0179.774] CloseHandle (hObject=0xa4) returned 1 [0179.774] AreFileApisANSI () returned 1 [0179.775] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0179.822] CloseHandle (hObject=0xa8) returned 1 [0179.824] AreFileApisANSI () returned 1 [0179.824] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0179.824] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2e08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0179.824] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0179.825] AreFileApisANSI () returned 1 [0179.825] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0179.874] CloseHandle (hObject=0xa4) returned 1 [0179.874] AreFileApisANSI () returned 1 [0179.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0179.875] CloseHandle (hObject=0xa4) returned 1 [0179.876] AreFileApisANSI () returned 1 [0179.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0179.878] CloseHandle (hObject=0xa4) returned 1 [0179.879] AreFileApisANSI () returned 1 [0179.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0179.880] CloseHandle (hObject=0xa4) returned 1 [0179.880] AreFileApisANSI () returned 1 [0179.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0179.881] CloseHandle (hObject=0xa4) returned 1 [0179.882] AreFileApisANSI () returned 1 [0179.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0179.891] CloseHandle (hObject=0xa4) returned 1 [0179.892] AreFileApisANSI () returned 1 [0179.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0179.978] CloseHandle (hObject=0xa0) returned 1 [0179.978] AreFileApisANSI () returned 1 [0179.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0179.980] CloseHandle (hObject=0xa0) returned 1 [0179.980] AreFileApisANSI () returned 1 [0179.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0179.981] CloseHandle (hObject=0xa0) returned 1 [0179.982] AreFileApisANSI () returned 1 [0179.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0180.012] CloseHandle (hObject=0xa4) returned 1 [0180.014] AreFileApisANSI () returned 1 [0180.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0180.015] CloseHandle (hObject=0xa4) returned 1 [0180.016] AreFileApisANSI () returned 1 [0180.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0180.017] CloseHandle (hObject=0xa4) returned 1 [0180.017] AreFileApisANSI () returned 1 [0180.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0180.019] CloseHandle (hObject=0xa8) returned 1 [0180.019] AreFileApisANSI () returned 1 [0180.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0180.020] CloseHandle (hObject=0xa8) returned 1 [0180.021] AreFileApisANSI () returned 1 [0180.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0180.024] CloseHandle (hObject=0xa8) returned 1 [0180.025] AreFileApisANSI () returned 1 [0180.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0180.026] CloseHandle (hObject=0xa8) returned 1 [0180.026] AreFileApisANSI () returned 1 [0180.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0180.030] CloseHandle (hObject=0xa8) returned 1 [0180.030] AreFileApisANSI () returned 1 [0180.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0180.061] CloseHandle (hObject=0xa8) returned 1 [0180.062] AreFileApisANSI () returned 1 [0180.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0180.064] CloseHandle (hObject=0xa8) returned 1 [0180.064] AreFileApisANSI () returned 1 [0180.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0180.065] CloseHandle (hObject=0xa8) returned 1 [0180.066] AreFileApisANSI () returned 1 [0180.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0180.070] CloseHandle (hObject=0xa8) returned 1 [0180.071] AreFileApisANSI () returned 1 [0180.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0180.073] CloseHandle (hObject=0xa8) returned 1 [0180.073] AreFileApisANSI () returned 1 [0180.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0180.075] CloseHandle (hObject=0xa8) returned 1 [0180.075] AreFileApisANSI () returned 1 [0180.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0180.080] CloseHandle (hObject=0xa8) returned 1 [0180.081] AreFileApisANSI () returned 1 [0180.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0180.082] CloseHandle (hObject=0xa4) returned 1 [0180.083] AreFileApisANSI () returned 1 [0180.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0180.084] CloseHandle (hObject=0xa4) returned 1 [0180.084] AreFileApisANSI () returned 1 [0180.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0180.126] CloseHandle (hObject=0xa4) returned 1 [0180.127] AreFileApisANSI () returned 1 [0180.127] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0180.129] CloseHandle (hObject=0xa4) returned 1 [0180.130] AreFileApisANSI () returned 1 [0180.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0180.130] CloseHandle (hObject=0xa4) returned 1 [0180.131] AreFileApisANSI () returned 1 [0180.131] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0180.133] CloseHandle (hObject=0xa4) returned 1 [0180.133] AreFileApisANSI () returned 1 [0180.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0180.134] CloseHandle (hObject=0xa4) returned 1 [0180.201] AreFileApisANSI () returned 1 [0180.201] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0180.202] CloseHandle (hObject=0xa4) returned 1 [0180.203] AreFileApisANSI () returned 1 [0180.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0180.210] CloseHandle (hObject=0xa4) returned 1 [0180.214] AreFileApisANSI () returned 1 [0180.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 174 [0180.217] CloseHandle (hObject=0xa4) returned 1 [0180.218] AreFileApisANSI () returned 1 [0180.218] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0180.219] CloseHandle (hObject=0xa4) returned 1 [0180.220] AreFileApisANSI () returned 1 [0180.220] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 174 [0180.221] CloseHandle (hObject=0xa4) returned 1 [0180.222] AreFileApisANSI () returned 1 [0180.222] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2330, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 190 [0180.323] CloseHandle (hObject=0xa8) returned 1 [0180.323] AreFileApisANSI () returned 1 [0180.323] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2100, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 187 [0180.324] CloseHandle (hObject=0xa8) returned 1 [0180.325] AreFileApisANSI () returned 1 [0180.325] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2100, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 190 [0180.327] CloseHandle (hObject=0xa8) returned 1 [0180.328] AreFileApisANSI () returned 1 [0180.328] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 189 [0180.750] CloseHandle (hObject=0xac) returned 1 [0180.751] AreFileApisANSI () returned 1 [0180.751] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 189 [0180.751] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 198 [0180.751] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0180.753] AreFileApisANSI () returned 1 [0180.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0180.754] CloseHandle (hObject=0xa4) returned 1 [0180.754] AreFileApisANSI () returned 1 [0180.755] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0180.756] CloseHandle (hObject=0xa4) returned 1 [0180.756] AreFileApisANSI () returned 1 [0180.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0180.769] CloseHandle (hObject=0xa4) returned 1 [0180.770] AreFileApisANSI () returned 1 [0180.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0180.773] CloseHandle (hObject=0xa4) returned 1 [0180.773] AreFileApisANSI () returned 1 [0180.773] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0180.776] CloseHandle (hObject=0xa4) returned 1 [0180.777] AreFileApisANSI () returned 1 [0180.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0180.778] CloseHandle (hObject=0xa4) returned 1 [0180.778] AreFileApisANSI () returned 1 [0180.778] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0180.806] CloseHandle (hObject=0xa8) returned 1 [0180.807] AreFileApisANSI () returned 1 [0180.807] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0180.807] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a30b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0180.807] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0180.808] AreFileApisANSI () returned 1 [0180.808] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0180.809] CloseHandle (hObject=0xa4) returned 1 [0180.810] AreFileApisANSI () returned 1 [0180.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0180.811] CloseHandle (hObject=0xa4) returned 1 [0180.811] AreFileApisANSI () returned 1 [0180.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0180.814] CloseHandle (hObject=0xa4) returned 1 [0180.815] AreFileApisANSI () returned 1 [0180.815] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0180.817] CloseHandle (hObject=0xa4) returned 1 [0180.817] AreFileApisANSI () returned 1 [0180.817] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0180.818] CloseHandle (hObject=0xa4) returned 1 [0180.819] AreFileApisANSI () returned 1 [0180.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0180.821] CloseHandle (hObject=0xa4) returned 1 [0180.821] AreFileApisANSI () returned 1 [0180.821] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0180.836] CloseHandle (hObject=0xa0) returned 1 [0180.837] AreFileApisANSI () returned 1 [0180.837] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0180.839] CloseHandle (hObject=0xa0) returned 1 [0180.839] AreFileApisANSI () returned 1 [0180.839] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0180.840] CloseHandle (hObject=0xa0) returned 1 [0180.841] AreFileApisANSI () returned 1 [0180.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0180.857] CloseHandle (hObject=0xa4) returned 1 [0180.858] AreFileApisANSI () returned 1 [0180.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0180.859] CloseHandle (hObject=0xa4) returned 1 [0180.860] AreFileApisANSI () returned 1 [0180.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0180.861] CloseHandle (hObject=0xa4) returned 1 [0180.862] AreFileApisANSI () returned 1 [0180.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0180.864] CloseHandle (hObject=0xa8) returned 1 [0180.864] AreFileApisANSI () returned 1 [0180.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5838, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0180.865] CloseHandle (hObject=0xa8) returned 1 [0180.866] AreFileApisANSI () returned 1 [0180.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0180.878] CloseHandle (hObject=0xa8) returned 1 [0180.879] AreFileApisANSI () returned 1 [0180.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0180.881] CloseHandle (hObject=0xa8) returned 1 [0180.881] AreFileApisANSI () returned 1 [0180.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a55e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0180.882] CloseHandle (hObject=0xa8) returned 1 [0180.883] AreFileApisANSI () returned 1 [0180.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5838, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0180.885] CloseHandle (hObject=0xa8) returned 1 [0180.886] AreFileApisANSI () returned 1 [0180.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0180.887] CloseHandle (hObject=0xa8) returned 1 [0180.888] AreFileApisANSI () returned 1 [0180.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0180.889] CloseHandle (hObject=0xa8) returned 1 [0180.889] AreFileApisANSI () returned 1 [0180.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0180.906] CloseHandle (hObject=0xa8) returned 1 [0180.906] AreFileApisANSI () returned 1 [0180.906] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49be28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0180.907] CloseHandle (hObject=0xa8) returned 1 [0180.908] AreFileApisANSI () returned 1 [0180.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0180.909] CloseHandle (hObject=0xa8) returned 1 [0180.909] AreFileApisANSI () returned 1 [0180.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0180.920] CloseHandle (hObject=0xa8) returned 1 [0180.920] AreFileApisANSI () returned 1 [0180.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0180.921] CloseHandle (hObject=0xa4) returned 1 [0180.922] AreFileApisANSI () returned 1 [0180.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0180.923] CloseHandle (hObject=0xa4) returned 1 [0180.923] AreFileApisANSI () returned 1 [0180.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0180.925] CloseHandle (hObject=0xa4) returned 1 [0180.925] AreFileApisANSI () returned 1 [0180.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0180.926] CloseHandle (hObject=0xa4) returned 1 [0180.927] AreFileApisANSI () returned 1 [0180.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0180.927] CloseHandle (hObject=0xa4) returned 1 [0180.928] AreFileApisANSI () returned 1 [0180.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0180.930] CloseHandle (hObject=0xa4) returned 1 [0180.930] AreFileApisANSI () returned 1 [0180.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49be28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0180.931] CloseHandle (hObject=0xa4) returned 1 [0180.931] AreFileApisANSI () returned 1 [0180.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0180.932] CloseHandle (hObject=0xa4) returned 1 [0180.932] AreFileApisANSI () returned 1 [0180.933] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0180.943] CloseHandle (hObject=0xa4) returned 1 [0180.944] AreFileApisANSI () returned 1 [0180.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1b88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 189 [0180.946] CloseHandle (hObject=0xa4) returned 1 [0180.946] AreFileApisANSI () returned 1 [0180.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1b88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 186 [0180.947] CloseHandle (hObject=0xa4) returned 1 [0180.948] AreFileApisANSI () returned 1 [0180.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 189 [0180.949] CloseHandle (hObject=0xa4) returned 1 [0180.949] AreFileApisANSI () returned 1 [0180.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496c00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 205 [0180.952] CloseHandle (hObject=0xa8) returned 1 [0180.953] AreFileApisANSI () returned 1 [0180.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 202 [0180.954] CloseHandle (hObject=0xa8) returned 1 [0180.954] AreFileApisANSI () returned 1 [0180.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4962c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 205 [0180.955] CloseHandle (hObject=0xa8) returned 1 [0180.955] AreFileApisANSI () returned 1 [0180.955] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 204 [0180.990] CloseHandle (hObject=0xac) returned 1 [0180.991] AreFileApisANSI () returned 1 [0180.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 204 [0180.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0e20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 213 [0180.991] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0180.992] AreFileApisANSI () returned 1 [0180.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0180.993] CloseHandle (hObject=0xa4) returned 1 [0180.994] AreFileApisANSI () returned 1 [0180.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0180.996] CloseHandle (hObject=0xa4) returned 1 [0180.996] AreFileApisANSI () returned 1 [0180.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0180.998] CloseHandle (hObject=0xa4) returned 1 [0180.999] AreFileApisANSI () returned 1 [0180.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0181.000] CloseHandle (hObject=0xa4) returned 1 [0181.000] AreFileApisANSI () returned 1 [0181.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0181.012] CloseHandle (hObject=0xa4) returned 1 [0181.012] AreFileApisANSI () returned 1 [0181.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0181.013] CloseHandle (hObject=0xa4) returned 1 [0181.014] AreFileApisANSI () returned 1 [0181.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0181.023] CloseHandle (hObject=0xa8) returned 1 [0181.024] AreFileApisANSI () returned 1 [0181.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0181.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0181.024] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0181.025] AreFileApisANSI () returned 1 [0181.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0181.026] CloseHandle (hObject=0xa4) returned 1 [0181.026] AreFileApisANSI () returned 1 [0181.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5838, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0181.028] CloseHandle (hObject=0xa4) returned 1 [0181.028] AreFileApisANSI () returned 1 [0181.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0181.030] CloseHandle (hObject=0xa4) returned 1 [0181.031] AreFileApisANSI () returned 1 [0181.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0181.032] CloseHandle (hObject=0xa4) returned 1 [0181.032] AreFileApisANSI () returned 1 [0181.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0181.033] CloseHandle (hObject=0xa4) returned 1 [0181.033] AreFileApisANSI () returned 1 [0181.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0181.035] CloseHandle (hObject=0xa4) returned 1 [0181.036] AreFileApisANSI () returned 1 [0181.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0181.198] CloseHandle (hObject=0xa0) returned 1 [0181.198] AreFileApisANSI () returned 1 [0181.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0181.199] CloseHandle (hObject=0xa0) returned 1 [0181.200] AreFileApisANSI () returned 1 [0181.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0181.201] CloseHandle (hObject=0xa0) returned 1 [0181.201] AreFileApisANSI () returned 1 [0181.201] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0181.242] CloseHandle (hObject=0xa4) returned 1 [0181.243] AreFileApisANSI () returned 1 [0181.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0181.244] CloseHandle (hObject=0xa4) returned 1 [0181.244] AreFileApisANSI () returned 1 [0181.244] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0181.245] CloseHandle (hObject=0xa4) returned 1 [0181.245] AreFileApisANSI () returned 1 [0181.245] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0181.247] CloseHandle (hObject=0xa8) returned 1 [0181.247] AreFileApisANSI () returned 1 [0181.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0181.248] CloseHandle (hObject=0xa8) returned 1 [0181.249] AreFileApisANSI () returned 1 [0181.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0181.251] CloseHandle (hObject=0xa8) returned 1 [0181.251] AreFileApisANSI () returned 1 [0181.251] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0181.252] CloseHandle (hObject=0xa8) returned 1 [0181.252] AreFileApisANSI () returned 1 [0181.252] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0181.253] CloseHandle (hObject=0xa8) returned 1 [0181.254] AreFileApisANSI () returned 1 [0181.254] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0181.256] CloseHandle (hObject=0xa8) returned 1 [0181.256] AreFileApisANSI () returned 1 [0181.256] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0181.257] CloseHandle (hObject=0xa8) returned 1 [0181.258] AreFileApisANSI () returned 1 [0181.258] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0181.259] CloseHandle (hObject=0xa8) returned 1 [0181.259] AreFileApisANSI () returned 1 [0181.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0181.262] CloseHandle (hObject=0xa8) returned 1 [0181.262] AreFileApisANSI () returned 1 [0181.262] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0181.264] CloseHandle (hObject=0xa8) returned 1 [0181.264] AreFileApisANSI () returned 1 [0181.264] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0181.265] CloseHandle (hObject=0xa8) returned 1 [0181.265] AreFileApisANSI () returned 1 [0181.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0181.267] CloseHandle (hObject=0xa8) returned 1 [0181.268] AreFileApisANSI () returned 1 [0181.268] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0181.269] CloseHandle (hObject=0xa4) returned 1 [0181.269] AreFileApisANSI () returned 1 [0181.269] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0181.270] CloseHandle (hObject=0xa4) returned 1 [0181.270] AreFileApisANSI () returned 1 [0181.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0181.273] CloseHandle (hObject=0xa4) returned 1 [0181.273] AreFileApisANSI () returned 1 [0181.273] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0181.294] CloseHandle (hObject=0xa4) returned 1 [0181.294] AreFileApisANSI () returned 1 [0181.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0181.295] CloseHandle (hObject=0xa4) returned 1 [0181.296] AreFileApisANSI () returned 1 [0181.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0181.302] CloseHandle (hObject=0xa4) returned 1 [0181.303] AreFileApisANSI () returned 1 [0181.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0181.304] CloseHandle (hObject=0xa4) returned 1 [0181.304] AreFileApisANSI () returned 1 [0181.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0181.305] CloseHandle (hObject=0xa4) returned 1 [0181.306] AreFileApisANSI () returned 1 [0181.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0181.308] CloseHandle (hObject=0xa4) returned 1 [0181.308] AreFileApisANSI () returned 1 [0181.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0181.309] CloseHandle (hObject=0xa4) returned 1 [0181.309] AreFileApisANSI () returned 1 [0181.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0181.310] CloseHandle (hObject=0xa4) returned 1 [0181.311] AreFileApisANSI () returned 1 [0181.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0181.313] CloseHandle (hObject=0xa4) returned 1 [0181.313] AreFileApisANSI () returned 1 [0181.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0181.341] CloseHandle (hObject=0xa4) returned 1 [0181.342] AreFileApisANSI () returned 1 [0181.342] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0181.343] CloseHandle (hObject=0xa4) returned 1 [0181.343] AreFileApisANSI () returned 1 [0181.343] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0181.344] CloseHandle (hObject=0xa4) returned 1 [0181.345] AreFileApisANSI () returned 1 [0181.345] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0181.394] CloseHandle (hObject=0xa8) returned 1 [0181.395] AreFileApisANSI () returned 1 [0181.395] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0181.395] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0181.395] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0181.398] AreFileApisANSI () returned 1 [0181.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0181.399] CloseHandle (hObject=0xa4) returned 1 [0181.399] AreFileApisANSI () returned 1 [0181.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0181.400] CloseHandle (hObject=0xa4) returned 1 [0181.400] AreFileApisANSI () returned 1 [0181.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0181.501] CloseHandle (hObject=0xa4) returned 1 [0181.502] AreFileApisANSI () returned 1 [0181.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0181.503] CloseHandle (hObject=0xa4) returned 1 [0181.504] AreFileApisANSI () returned 1 [0181.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0181.505] CloseHandle (hObject=0xa4) returned 1 [0181.505] AreFileApisANSI () returned 1 [0181.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0181.507] CloseHandle (hObject=0xa4) returned 1 [0181.508] AreFileApisANSI () returned 1 [0181.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0181.531] CloseHandle (hObject=0xa0) returned 1 [0181.531] AreFileApisANSI () returned 1 [0181.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0181.532] CloseHandle (hObject=0xa0) returned 1 [0181.533] AreFileApisANSI () returned 1 [0181.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0181.534] CloseHandle (hObject=0xa0) returned 1 [0181.534] AreFileApisANSI () returned 1 [0181.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0181.570] CloseHandle (hObject=0xa4) returned 1 [0181.570] AreFileApisANSI () returned 1 [0181.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0181.572] CloseHandle (hObject=0xa4) returned 1 [0181.572] AreFileApisANSI () returned 1 [0181.572] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0181.573] CloseHandle (hObject=0xa4) returned 1 [0181.574] AreFileApisANSI () returned 1 [0181.574] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0181.576] CloseHandle (hObject=0xa8) returned 1 [0181.576] AreFileApisANSI () returned 1 [0181.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0181.577] CloseHandle (hObject=0xa8) returned 1 [0181.577] AreFileApisANSI () returned 1 [0181.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0181.602] CloseHandle (hObject=0xa8) returned 1 [0181.603] AreFileApisANSI () returned 1 [0181.603] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0181.604] CloseHandle (hObject=0xa8) returned 1 [0181.604] AreFileApisANSI () returned 1 [0181.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0181.606] CloseHandle (hObject=0xa8) returned 1 [0181.606] AreFileApisANSI () returned 1 [0181.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0181.608] CloseHandle (hObject=0xa8) returned 1 [0181.608] AreFileApisANSI () returned 1 [0181.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0181.609] CloseHandle (hObject=0xa8) returned 1 [0181.610] AreFileApisANSI () returned 1 [0181.610] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0181.611] CloseHandle (hObject=0xa8) returned 1 [0181.611] AreFileApisANSI () returned 1 [0181.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0181.613] CloseHandle (hObject=0xa8) returned 1 [0181.614] AreFileApisANSI () returned 1 [0181.614] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0181.615] CloseHandle (hObject=0xa8) returned 1 [0181.615] AreFileApisANSI () returned 1 [0181.615] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0181.616] CloseHandle (hObject=0xa8) returned 1 [0181.617] AreFileApisANSI () returned 1 [0181.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0181.619] CloseHandle (hObject=0xa8) returned 1 [0181.619] AreFileApisANSI () returned 1 [0181.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0181.621] CloseHandle (hObject=0xa4) returned 1 [0181.621] AreFileApisANSI () returned 1 [0181.621] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0181.622] CloseHandle (hObject=0xa4) returned 1 [0181.623] AreFileApisANSI () returned 1 [0181.623] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0181.625] CloseHandle (hObject=0xa4) returned 1 [0181.626] AreFileApisANSI () returned 1 [0181.626] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0181.627] CloseHandle (hObject=0xa4) returned 1 [0181.628] AreFileApisANSI () returned 1 [0181.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0181.629] CloseHandle (hObject=0xa4) returned 1 [0181.629] AreFileApisANSI () returned 1 [0181.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0181.631] CloseHandle (hObject=0xa4) returned 1 [0181.632] AreFileApisANSI () returned 1 [0181.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0181.633] CloseHandle (hObject=0xa4) returned 1 [0181.633] AreFileApisANSI () returned 1 [0181.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0181.634] CloseHandle (hObject=0xa4) returned 1 [0181.634] AreFileApisANSI () returned 1 [0181.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0181.636] CloseHandle (hObject=0xa4) returned 1 [0181.637] AreFileApisANSI () returned 1 [0181.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0181.638] CloseHandle (hObject=0xa4) returned 1 [0181.638] AreFileApisANSI () returned 1 [0181.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0181.640] CloseHandle (hObject=0xa4) returned 1 [0181.640] AreFileApisANSI () returned 1 [0181.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0181.684] CloseHandle (hObject=0xa4) returned 1 [0181.685] AreFileApisANSI () returned 1 [0181.685] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0181.723] CloseHandle (hObject=0xa4) returned 1 [0181.724] AreFileApisANSI () returned 1 [0181.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0181.725] CloseHandle (hObject=0xa4) returned 1 [0181.725] AreFileApisANSI () returned 1 [0181.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0181.726] CloseHandle (hObject=0xa4) returned 1 [0181.727] AreFileApisANSI () returned 1 [0181.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0181.837] CloseHandle (hObject=0xa8) returned 1 [0181.837] AreFileApisANSI () returned 1 [0181.837] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0181.837] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3138, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0181.837] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0181.839] AreFileApisANSI () returned 1 [0181.839] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0181.840] CloseHandle (hObject=0xa4) returned 1 [0181.840] AreFileApisANSI () returned 1 [0181.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0181.841] CloseHandle (hObject=0xa4) returned 1 [0181.842] AreFileApisANSI () returned 1 [0181.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0181.846] CloseHandle (hObject=0xa4) returned 1 [0181.847] AreFileApisANSI () returned 1 [0181.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0181.848] CloseHandle (hObject=0xa4) returned 1 [0181.848] AreFileApisANSI () returned 1 [0181.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0181.850] CloseHandle (hObject=0xa4) returned 1 [0181.850] AreFileApisANSI () returned 1 [0181.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0181.854] CloseHandle (hObject=0xa4) returned 1 [0181.855] AreFileApisANSI () returned 1 [0181.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0181.891] CloseHandle (hObject=0xa0) returned 1 [0181.891] AreFileApisANSI () returned 1 [0181.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0181.893] CloseHandle (hObject=0xa0) returned 1 [0181.893] AreFileApisANSI () returned 1 [0181.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0181.894] CloseHandle (hObject=0xa0) returned 1 [0181.895] AreFileApisANSI () returned 1 [0181.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0181.998] CloseHandle (hObject=0xa4) returned 1 [0181.998] AreFileApisANSI () returned 1 [0181.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0181.999] CloseHandle (hObject=0xa4) returned 1 [0181.999] AreFileApisANSI () returned 1 [0181.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0182.000] CloseHandle (hObject=0xa4) returned 1 [0182.001] AreFileApisANSI () returned 1 [0182.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0182.003] CloseHandle (hObject=0xa8) returned 1 [0182.003] AreFileApisANSI () returned 1 [0182.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0182.011] CloseHandle (hObject=0xa8) returned 1 [0182.011] AreFileApisANSI () returned 1 [0182.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0182.083] CloseHandle (hObject=0xa8) returned 1 [0182.084] AreFileApisANSI () returned 1 [0182.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0182.085] CloseHandle (hObject=0xa8) returned 1 [0182.086] AreFileApisANSI () returned 1 [0182.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0182.087] CloseHandle (hObject=0xa8) returned 1 [0182.087] AreFileApisANSI () returned 1 [0182.087] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0182.089] CloseHandle (hObject=0xa8) returned 1 [0182.090] AreFileApisANSI () returned 1 [0182.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0182.091] CloseHandle (hObject=0xa8) returned 1 [0182.091] AreFileApisANSI () returned 1 [0182.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0182.092] CloseHandle (hObject=0xa8) returned 1 [0182.093] AreFileApisANSI () returned 1 [0182.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0182.138] CloseHandle (hObject=0xa8) returned 1 [0182.139] AreFileApisANSI () returned 1 [0182.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0182.140] CloseHandle (hObject=0xa8) returned 1 [0182.141] AreFileApisANSI () returned 1 [0182.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0182.142] CloseHandle (hObject=0xa8) returned 1 [0182.142] AreFileApisANSI () returned 1 [0182.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0182.145] CloseHandle (hObject=0xa8) returned 1 [0182.145] AreFileApisANSI () returned 1 [0182.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0182.147] CloseHandle (hObject=0xa4) returned 1 [0182.148] AreFileApisANSI () returned 1 [0182.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0182.149] CloseHandle (hObject=0xa4) returned 1 [0182.150] AreFileApisANSI () returned 1 [0182.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0182.209] CloseHandle (hObject=0xa4) returned 1 [0182.210] AreFileApisANSI () returned 1 [0182.210] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0182.211] CloseHandle (hObject=0xa4) returned 1 [0182.212] AreFileApisANSI () returned 1 [0182.212] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0182.213] CloseHandle (hObject=0xa4) returned 1 [0182.214] AreFileApisANSI () returned 1 [0182.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0182.291] CloseHandle (hObject=0xa4) returned 1 [0182.291] AreFileApisANSI () returned 1 [0182.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0182.293] CloseHandle (hObject=0xa4) returned 1 [0182.293] AreFileApisANSI () returned 1 [0182.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0182.294] CloseHandle (hObject=0xa4) returned 1 [0182.295] AreFileApisANSI () returned 1 [0182.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0182.297] CloseHandle (hObject=0xa4) returned 1 [0182.298] AreFileApisANSI () returned 1 [0182.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3fb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0182.301] CloseHandle (hObject=0xa4) returned 1 [0182.301] AreFileApisANSI () returned 1 [0182.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a4390, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 163 [0182.306] CloseHandle (hObject=0xa4) returned 1 [0182.307] AreFileApisANSI () returned 1 [0182.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3bd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0182.308] CloseHandle (hObject=0xa4) returned 1 [0182.309] AreFileApisANSI () returned 1 [0182.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 182 [0182.358] CloseHandle (hObject=0xa8) returned 1 [0182.359] AreFileApisANSI () returned 1 [0182.359] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1ed0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0182.360] CloseHandle (hObject=0xa8) returned 1 [0182.360] AreFileApisANSI () returned 1 [0182.361] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 182 [0182.362] CloseHandle (hObject=0xa8) returned 1 [0182.362] AreFileApisANSI () returned 1 [0182.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 181 [0182.817] CloseHandle (hObject=0xac) returned 1 [0182.818] AreFileApisANSI () returned 1 [0182.818] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 181 [0182.818] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 190 [0182.818] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0182.820] AreFileApisANSI () returned 1 [0182.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0182.821] CloseHandle (hObject=0xa4) returned 1 [0182.821] AreFileApisANSI () returned 1 [0182.821] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0182.822] CloseHandle (hObject=0xa4) returned 1 [0182.823] AreFileApisANSI () returned 1 [0182.823] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0182.836] CloseHandle (hObject=0xa4) returned 1 [0182.838] AreFileApisANSI () returned 1 [0182.838] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0182.840] CloseHandle (hObject=0xa4) returned 1 [0182.841] AreFileApisANSI () returned 1 [0182.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0182.853] CloseHandle (hObject=0xa4) returned 1 [0182.854] AreFileApisANSI () returned 1 [0182.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0182.855] CloseHandle (hObject=0xa4) returned 1 [0182.856] AreFileApisANSI () returned 1 [0182.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0182.881] CloseHandle (hObject=0xa8) returned 1 [0182.882] AreFileApisANSI () returned 1 [0182.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0182.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0182.882] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0182.883] AreFileApisANSI () returned 1 [0182.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0182.885] CloseHandle (hObject=0xa4) returned 1 [0182.886] AreFileApisANSI () returned 1 [0182.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0182.887] CloseHandle (hObject=0xa4) returned 1 [0182.888] AreFileApisANSI () returned 1 [0182.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0182.893] CloseHandle (hObject=0xa4) returned 1 [0182.894] AreFileApisANSI () returned 1 [0182.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0182.897] CloseHandle (hObject=0xa4) returned 1 [0182.898] AreFileApisANSI () returned 1 [0182.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0182.900] CloseHandle (hObject=0xa4) returned 1 [0182.901] AreFileApisANSI () returned 1 [0182.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0182.906] CloseHandle (hObject=0xa4) returned 1 [0182.907] AreFileApisANSI () returned 1 [0182.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0182.915] CloseHandle (hObject=0xa0) returned 1 [0182.916] AreFileApisANSI () returned 1 [0182.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0182.929] CloseHandle (hObject=0xa0) returned 1 [0182.930] AreFileApisANSI () returned 1 [0182.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498128, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0182.932] CloseHandle (hObject=0xa0) returned 1 [0182.933] AreFileApisANSI () returned 1 [0182.933] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0182.944] CloseHandle (hObject=0xa4) returned 1 [0182.945] AreFileApisANSI () returned 1 [0182.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0182.947] CloseHandle (hObject=0xa4) returned 1 [0182.948] AreFileApisANSI () returned 1 [0182.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0182.949] CloseHandle (hObject=0xa4) returned 1 [0182.950] AreFileApisANSI () returned 1 [0182.950] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0182.953] CloseHandle (hObject=0xa8) returned 1 [0182.953] AreFileApisANSI () returned 1 [0182.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0182.955] CloseHandle (hObject=0xa8) returned 1 [0182.956] AreFileApisANSI () returned 1 [0182.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0182.976] CloseHandle (hObject=0xa8) returned 1 [0182.979] AreFileApisANSI () returned 1 [0182.979] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0182.981] CloseHandle (hObject=0xa8) returned 1 [0182.982] AreFileApisANSI () returned 1 [0182.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0182.983] CloseHandle (hObject=0xa8) returned 1 [0182.983] AreFileApisANSI () returned 1 [0182.984] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0182.986] CloseHandle (hObject=0xa8) returned 1 [0182.987] AreFileApisANSI () returned 1 [0182.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0182.988] CloseHandle (hObject=0xa8) returned 1 [0182.989] AreFileApisANSI () returned 1 [0182.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0182.990] CloseHandle (hObject=0xa8) returned 1 [0182.991] AreFileApisANSI () returned 1 [0182.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0183.022] CloseHandle (hObject=0xa8) returned 1 [0183.023] AreFileApisANSI () returned 1 [0183.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0183.025] CloseHandle (hObject=0xa8) returned 1 [0183.026] AreFileApisANSI () returned 1 [0183.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0183.027] CloseHandle (hObject=0xa8) returned 1 [0183.028] AreFileApisANSI () returned 1 [0183.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0183.031] CloseHandle (hObject=0xa8) returned 1 [0183.032] AreFileApisANSI () returned 1 [0183.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0183.033] CloseHandle (hObject=0xa4) returned 1 [0183.034] AreFileApisANSI () returned 1 [0183.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0183.036] CloseHandle (hObject=0xa4) returned 1 [0183.037] AreFileApisANSI () returned 1 [0183.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0183.042] CloseHandle (hObject=0xa4) returned 1 [0183.043] AreFileApisANSI () returned 1 [0183.043] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0183.045] CloseHandle (hObject=0xa4) returned 1 [0183.045] AreFileApisANSI () returned 1 [0183.045] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0183.047] CloseHandle (hObject=0xa4) returned 1 [0183.048] AreFileApisANSI () returned 1 [0183.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0183.070] CloseHandle (hObject=0xa4) returned 1 [0183.070] AreFileApisANSI () returned 1 [0183.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0183.072] CloseHandle (hObject=0xa4) returned 1 [0183.073] AreFileApisANSI () returned 1 [0183.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0183.074] CloseHandle (hObject=0xa4) returned 1 [0183.074] AreFileApisANSI () returned 1 [0183.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0183.085] CloseHandle (hObject=0xa4) returned 1 [0183.086] AreFileApisANSI () returned 1 [0183.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0183.087] CloseHandle (hObject=0xa4) returned 1 [0183.088] AreFileApisANSI () returned 1 [0183.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0183.091] CloseHandle (hObject=0xa4) returned 1 [0183.091] AreFileApisANSI () returned 1 [0183.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0183.093] CloseHandle (hObject=0xa4) returned 1 [0183.094] AreFileApisANSI () returned 1 [0183.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e6a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 162 [0183.130] CloseHandle (hObject=0xa8) returned 1 [0183.131] AreFileApisANSI () returned 1 [0183.131] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eda0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0183.132] CloseHandle (hObject=0xa8) returned 1 [0183.133] AreFileApisANSI () returned 1 [0183.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 162 [0183.134] CloseHandle (hObject=0xa8) returned 1 [0183.135] AreFileApisANSI () returned 1 [0183.135] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0183.188] CloseHandle (hObject=0xac) returned 1 [0183.189] AreFileApisANSI () returned 1 [0183.189] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0183.189] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0f00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 170 [0183.189] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0183.191] AreFileApisANSI () returned 1 [0183.191] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0183.192] CloseHandle (hObject=0xa4) returned 1 [0183.194] AreFileApisANSI () returned 1 [0183.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0183.196] CloseHandle (hObject=0xa4) returned 1 [0183.197] AreFileApisANSI () returned 1 [0183.197] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0183.212] CloseHandle (hObject=0xa4) returned 1 [0183.213] AreFileApisANSI () returned 1 [0183.213] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0183.214] CloseHandle (hObject=0xa4) returned 1 [0183.215] AreFileApisANSI () returned 1 [0183.215] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0183.218] CloseHandle (hObject=0xa4) returned 1 [0183.219] AreFileApisANSI () returned 1 [0183.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0183.220] CloseHandle (hObject=0xa4) returned 1 [0183.221] AreFileApisANSI () returned 1 [0183.221] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0183.248] CloseHandle (hObject=0xa8) returned 1 [0183.249] AreFileApisANSI () returned 1 [0183.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0183.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493ee8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0183.249] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0183.250] AreFileApisANSI () returned 1 [0183.250] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0183.252] CloseHandle (hObject=0xa4) returned 1 [0183.252] AreFileApisANSI () returned 1 [0183.252] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0183.255] CloseHandle (hObject=0xa4) returned 1 [0183.256] AreFileApisANSI () returned 1 [0183.256] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0183.258] CloseHandle (hObject=0xa4) returned 1 [0183.259] AreFileApisANSI () returned 1 [0183.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0183.260] CloseHandle (hObject=0xa4) returned 1 [0183.261] AreFileApisANSI () returned 1 [0183.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0183.262] CloseHandle (hObject=0xa4) returned 1 [0183.263] AreFileApisANSI () returned 1 [0183.263] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0183.279] CloseHandle (hObject=0xa4) returned 1 [0183.280] AreFileApisANSI () returned 1 [0183.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0183.296] CloseHandle (hObject=0xa0) returned 1 [0183.297] AreFileApisANSI () returned 1 [0183.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4986a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0183.299] CloseHandle (hObject=0xa0) returned 1 [0183.299] AreFileApisANSI () returned 1 [0183.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0183.301] CloseHandle (hObject=0xa0) returned 1 [0183.301] AreFileApisANSI () returned 1 [0183.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0183.308] CloseHandle (hObject=0xa4) returned 1 [0183.309] AreFileApisANSI () returned 1 [0183.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0183.310] CloseHandle (hObject=0xa4) returned 1 [0183.311] AreFileApisANSI () returned 1 [0183.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0183.312] CloseHandle (hObject=0xa4) returned 1 [0183.313] AreFileApisANSI () returned 1 [0183.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0183.315] CloseHandle (hObject=0xa8) returned 1 [0183.316] AreFileApisANSI () returned 1 [0183.316] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0183.317] CloseHandle (hObject=0xa8) returned 1 [0183.318] AreFileApisANSI () returned 1 [0183.318] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0183.336] CloseHandle (hObject=0xa8) returned 1 [0183.337] AreFileApisANSI () returned 1 [0183.337] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0183.338] CloseHandle (hObject=0xa8) returned 1 [0183.339] AreFileApisANSI () returned 1 [0183.339] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0183.340] CloseHandle (hObject=0xa8) returned 1 [0183.341] AreFileApisANSI () returned 1 [0183.341] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0183.350] CloseHandle (hObject=0xa8) returned 1 [0183.351] AreFileApisANSI () returned 1 [0183.351] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0183.353] CloseHandle (hObject=0xa8) returned 1 [0183.353] AreFileApisANSI () returned 1 [0183.353] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0183.355] CloseHandle (hObject=0xa8) returned 1 [0183.355] AreFileApisANSI () returned 1 [0183.355] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0183.360] CloseHandle (hObject=0xa8) returned 1 [0183.361] AreFileApisANSI () returned 1 [0183.361] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0183.363] CloseHandle (hObject=0xa8) returned 1 [0183.363] AreFileApisANSI () returned 1 [0183.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0183.365] CloseHandle (hObject=0xa8) returned 1 [0183.366] AreFileApisANSI () returned 1 [0183.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0183.369] CloseHandle (hObject=0xa8) returned 1 [0183.370] AreFileApisANSI () returned 1 [0183.370] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0183.372] CloseHandle (hObject=0xa4) returned 1 [0183.373] AreFileApisANSI () returned 1 [0183.373] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0183.375] CloseHandle (hObject=0xa4) returned 1 [0183.375] AreFileApisANSI () returned 1 [0183.375] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0183.379] CloseHandle (hObject=0xa4) returned 1 [0183.380] AreFileApisANSI () returned 1 [0183.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0183.381] CloseHandle (hObject=0xa4) returned 1 [0183.382] AreFileApisANSI () returned 1 [0183.382] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0183.384] CloseHandle (hObject=0xa4) returned 1 [0183.384] AreFileApisANSI () returned 1 [0183.384] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0183.396] CloseHandle (hObject=0xa4) returned 1 [0183.397] AreFileApisANSI () returned 1 [0183.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0183.399] CloseHandle (hObject=0xa4) returned 1 [0183.399] AreFileApisANSI () returned 1 [0183.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0183.401] CloseHandle (hObject=0xa4) returned 1 [0183.401] AreFileApisANSI () returned 1 [0183.401] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0183.404] CloseHandle (hObject=0xa4) returned 1 [0183.405] AreFileApisANSI () returned 1 [0183.405] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0183.407] CloseHandle (hObject=0xa4) returned 1 [0183.407] AreFileApisANSI () returned 1 [0183.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0183.410] CloseHandle (hObject=0xa4) returned 1 [0183.411] AreFileApisANSI () returned 1 [0183.411] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0183.413] CloseHandle (hObject=0xa4) returned 1 [0183.414] AreFileApisANSI () returned 1 [0183.414] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f200, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 162 [0183.477] CloseHandle (hObject=0xa8) returned 1 [0183.478] AreFileApisANSI () returned 1 [0183.478] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ea20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0183.480] CloseHandle (hObject=0xa8) returned 1 [0183.481] AreFileApisANSI () returned 1 [0183.481] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ebe0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 162 [0183.482] CloseHandle (hObject=0xa8) returned 1 [0183.483] AreFileApisANSI () returned 1 [0183.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0183.500] CloseHandle (hObject=0xac) returned 1 [0183.500] AreFileApisANSI () returned 1 [0183.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0183.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1408, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 170 [0183.501] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0183.502] AreFileApisANSI () returned 1 [0183.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0183.503] CloseHandle (hObject=0xa4) returned 1 [0183.504] AreFileApisANSI () returned 1 [0183.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0183.505] CloseHandle (hObject=0xa4) returned 1 [0183.511] AreFileApisANSI () returned 1 [0183.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0183.531] CloseHandle (hObject=0xa4) returned 1 [0183.531] AreFileApisANSI () returned 1 [0183.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0183.533] CloseHandle (hObject=0xa4) returned 1 [0183.533] AreFileApisANSI () returned 1 [0183.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0183.536] CloseHandle (hObject=0xa4) returned 1 [0183.537] AreFileApisANSI () returned 1 [0183.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0183.538] CloseHandle (hObject=0xa4) returned 1 [0183.538] AreFileApisANSI () returned 1 [0183.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0183.552] CloseHandle (hObject=0xa8) returned 1 [0183.555] AreFileApisANSI () returned 1 [0183.555] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0183.555] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493d08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0183.555] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0183.557] AreFileApisANSI () returned 1 [0183.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0183.558] CloseHandle (hObject=0xa4) returned 1 [0183.559] AreFileApisANSI () returned 1 [0183.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0183.560] CloseHandle (hObject=0xa4) returned 1 [0183.561] AreFileApisANSI () returned 1 [0183.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0183.563] CloseHandle (hObject=0xa4) returned 1 [0183.564] AreFileApisANSI () returned 1 [0183.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0183.565] CloseHandle (hObject=0xa4) returned 1 [0183.566] AreFileApisANSI () returned 1 [0183.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0183.567] CloseHandle (hObject=0xa4) returned 1 [0183.567] AreFileApisANSI () returned 1 [0183.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0183.572] CloseHandle (hObject=0xa4) returned 1 [0183.573] AreFileApisANSI () returned 1 [0183.573] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0183.578] CloseHandle (hObject=0xa0) returned 1 [0183.579] AreFileApisANSI () returned 1 [0183.579] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0183.580] CloseHandle (hObject=0xa0) returned 1 [0183.580] AreFileApisANSI () returned 1 [0183.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0183.582] CloseHandle (hObject=0xa0) returned 1 [0183.582] AreFileApisANSI () returned 1 [0183.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0183.602] CloseHandle (hObject=0xa4) returned 1 [0183.602] AreFileApisANSI () returned 1 [0183.602] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0183.604] CloseHandle (hObject=0xa4) returned 1 [0183.604] AreFileApisANSI () returned 1 [0183.604] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0183.606] CloseHandle (hObject=0xa4) returned 1 [0183.606] AreFileApisANSI () returned 1 [0183.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0183.608] CloseHandle (hObject=0xa8) returned 1 [0183.609] AreFileApisANSI () returned 1 [0183.609] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0183.611] CloseHandle (hObject=0xa8) returned 1 [0183.611] AreFileApisANSI () returned 1 [0183.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0183.615] CloseHandle (hObject=0xa8) returned 1 [0183.619] AreFileApisANSI () returned 1 [0183.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0183.621] CloseHandle (hObject=0xa8) returned 1 [0183.621] AreFileApisANSI () returned 1 [0183.621] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0183.623] CloseHandle (hObject=0xa8) returned 1 [0183.623] AreFileApisANSI () returned 1 [0183.623] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0183.640] CloseHandle (hObject=0xa8) returned 1 [0183.641] AreFileApisANSI () returned 1 [0183.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0183.666] CloseHandle (hObject=0xa8) returned 1 [0183.666] AreFileApisANSI () returned 1 [0183.666] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0183.667] CloseHandle (hObject=0xa8) returned 1 [0183.668] AreFileApisANSI () returned 1 [0183.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0183.671] CloseHandle (hObject=0xa8) returned 1 [0183.672] AreFileApisANSI () returned 1 [0183.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0183.674] CloseHandle (hObject=0xa8) returned 1 [0183.675] AreFileApisANSI () returned 1 [0183.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0183.676] CloseHandle (hObject=0xa8) returned 1 [0183.677] AreFileApisANSI () returned 1 [0183.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0183.680] CloseHandle (hObject=0xa8) returned 1 [0183.684] AreFileApisANSI () returned 1 [0183.684] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0183.685] CloseHandle (hObject=0xa4) returned 1 [0183.686] AreFileApisANSI () returned 1 [0183.686] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0183.687] CloseHandle (hObject=0xa4) returned 1 [0183.688] AreFileApisANSI () returned 1 [0183.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0183.697] CloseHandle (hObject=0xa4) returned 1 [0183.698] AreFileApisANSI () returned 1 [0183.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0183.699] CloseHandle (hObject=0xa4) returned 1 [0183.699] AreFileApisANSI () returned 1 [0183.700] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0183.701] CloseHandle (hObject=0xa4) returned 1 [0183.701] AreFileApisANSI () returned 1 [0183.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0183.713] CloseHandle (hObject=0xa4) returned 1 [0183.713] AreFileApisANSI () returned 1 [0183.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0183.715] CloseHandle (hObject=0xa4) returned 1 [0183.715] AreFileApisANSI () returned 1 [0183.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0183.716] CloseHandle (hObject=0xa4) returned 1 [0183.717] AreFileApisANSI () returned 1 [0183.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0183.720] CloseHandle (hObject=0xa4) returned 1 [0183.721] AreFileApisANSI () returned 1 [0183.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0183.722] CloseHandle (hObject=0xa4) returned 1 [0183.722] AreFileApisANSI () returned 1 [0183.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0183.724] CloseHandle (hObject=0xa4) returned 1 [0183.724] AreFileApisANSI () returned 1 [0183.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0183.727] CloseHandle (hObject=0xa4) returned 1 [0183.728] AreFileApisANSI () returned 1 [0183.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0183.732] CloseHandle (hObject=0xa4) returned 1 [0183.733] AreFileApisANSI () returned 1 [0183.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0183.734] CloseHandle (hObject=0xa4) returned 1 [0183.735] AreFileApisANSI () returned 1 [0183.735] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0183.736] CloseHandle (hObject=0xa4) returned 1 [0183.736] AreFileApisANSI () returned 1 [0183.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0183.748] CloseHandle (hObject=0xa8) returned 1 [0183.749] AreFileApisANSI () returned 1 [0183.749] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0183.749] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a33e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0183.749] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0183.751] AreFileApisANSI () returned 1 [0183.751] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0183.752] CloseHandle (hObject=0xa4) returned 1 [0183.753] AreFileApisANSI () returned 1 [0183.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0183.754] CloseHandle (hObject=0xa4) returned 1 [0183.754] AreFileApisANSI () returned 1 [0183.754] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0183.767] CloseHandle (hObject=0xa4) returned 1 [0183.768] AreFileApisANSI () returned 1 [0183.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0183.769] CloseHandle (hObject=0xa4) returned 1 [0183.770] AreFileApisANSI () returned 1 [0183.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0183.771] CloseHandle (hObject=0xa4) returned 1 [0183.773] AreFileApisANSI () returned 1 [0183.773] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0183.776] CloseHandle (hObject=0xa4) returned 1 [0183.777] AreFileApisANSI () returned 1 [0183.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0183.785] CloseHandle (hObject=0xa0) returned 1 [0183.786] AreFileApisANSI () returned 1 [0183.786] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0183.787] CloseHandle (hObject=0xa0) returned 1 [0183.788] AreFileApisANSI () returned 1 [0183.788] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0183.789] CloseHandle (hObject=0xa0) returned 1 [0183.790] AreFileApisANSI () returned 1 [0183.790] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0183.814] CloseHandle (hObject=0xa4) returned 1 [0183.814] AreFileApisANSI () returned 1 [0183.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0183.816] CloseHandle (hObject=0xa4) returned 1 [0183.816] AreFileApisANSI () returned 1 [0183.816] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0183.817] CloseHandle (hObject=0xa4) returned 1 [0183.818] AreFileApisANSI () returned 1 [0183.818] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0183.820] CloseHandle (hObject=0xa8) returned 1 [0183.821] AreFileApisANSI () returned 1 [0183.821] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0183.822] CloseHandle (hObject=0xa8) returned 1 [0183.822] AreFileApisANSI () returned 1 [0183.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5838, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0183.846] CloseHandle (hObject=0xa8) returned 1 [0183.847] AreFileApisANSI () returned 1 [0183.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0183.848] CloseHandle (hObject=0xa8) returned 1 [0183.848] AreFileApisANSI () returned 1 [0183.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0183.850] CloseHandle (hObject=0xa8) returned 1 [0183.851] AreFileApisANSI () returned 1 [0183.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0183.853] CloseHandle (hObject=0xa8) returned 1 [0183.854] AreFileApisANSI () returned 1 [0183.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0183.855] CloseHandle (hObject=0xa8) returned 1 [0183.856] AreFileApisANSI () returned 1 [0183.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0183.857] CloseHandle (hObject=0xa8) returned 1 [0183.857] AreFileApisANSI () returned 1 [0183.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0183.860] CloseHandle (hObject=0xa8) returned 1 [0183.860] AreFileApisANSI () returned 1 [0183.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0183.862] CloseHandle (hObject=0xa8) returned 1 [0183.862] AreFileApisANSI () returned 1 [0183.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0183.863] CloseHandle (hObject=0xa8) returned 1 [0183.863] AreFileApisANSI () returned 1 [0183.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0183.874] CloseHandle (hObject=0xa8) returned 1 [0183.875] AreFileApisANSI () returned 1 [0183.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0183.879] CloseHandle (hObject=0xa4) returned 1 [0183.879] AreFileApisANSI () returned 1 [0183.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0183.881] CloseHandle (hObject=0xa4) returned 1 [0183.881] AreFileApisANSI () returned 1 [0183.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0183.884] CloseHandle (hObject=0xa4) returned 1 [0183.884] AreFileApisANSI () returned 1 [0183.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0183.886] CloseHandle (hObject=0xa4) returned 1 [0183.887] AreFileApisANSI () returned 1 [0183.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0183.888] CloseHandle (hObject=0xa4) returned 1 [0183.888] AreFileApisANSI () returned 1 [0183.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0183.891] CloseHandle (hObject=0xa4) returned 1 [0183.891] AreFileApisANSI () returned 1 [0183.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0183.893] CloseHandle (hObject=0xa4) returned 1 [0183.894] AreFileApisANSI () returned 1 [0183.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0183.895] CloseHandle (hObject=0xa4) returned 1 [0183.897] AreFileApisANSI () returned 1 [0183.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0183.907] CloseHandle (hObject=0xa4) returned 1 [0183.908] AreFileApisANSI () returned 1 [0183.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496d28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 210 [0183.911] CloseHandle (hObject=0xa4) returned 1 [0183.911] AreFileApisANSI () returned 1 [0183.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496c00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 207 [0183.913] CloseHandle (hObject=0xa4) returned 1 [0183.913] AreFileApisANSI () returned 1 [0183.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4963e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 210 [0183.915] CloseHandle (hObject=0xa4) returned 1 [0183.915] AreFileApisANSI () returned 1 [0183.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 226 [0183.932] CloseHandle (hObject=0xa8) returned 1 [0183.933] AreFileApisANSI () returned 1 [0183.933] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 223 [0183.934] CloseHandle (hObject=0xa8) returned 1 [0183.935] AreFileApisANSI () returned 1 [0183.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4e0d48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 226 [0183.936] CloseHandle (hObject=0xa8) returned 1 [0183.937] AreFileApisANSI () returned 1 [0183.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 225 [0183.953] CloseHandle (hObject=0xac) returned 1 [0183.954] AreFileApisANSI () returned 1 [0183.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 225 [0183.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a36f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 234 [0183.954] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0183.955] AreFileApisANSI () returned 1 [0183.955] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0183.956] CloseHandle (hObject=0xa4) returned 1 [0183.957] AreFileApisANSI () returned 1 [0183.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0183.958] CloseHandle (hObject=0xa4) returned 1 [0183.959] AreFileApisANSI () returned 1 [0183.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0183.961] CloseHandle (hObject=0xa4) returned 1 [0183.961] AreFileApisANSI () returned 1 [0183.961] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0183.975] CloseHandle (hObject=0xa4) returned 1 [0183.975] AreFileApisANSI () returned 1 [0183.975] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0183.977] CloseHandle (hObject=0xa4) returned 1 [0183.977] AreFileApisANSI () returned 1 [0183.977] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0183.978] CloseHandle (hObject=0xa4) returned 1 [0183.979] AreFileApisANSI () returned 1 [0183.979] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0183.989] CloseHandle (hObject=0xa8) returned 1 [0183.990] AreFileApisANSI () returned 1 [0183.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0183.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0183.990] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0183.992] AreFileApisANSI () returned 1 [0183.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a55e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0183.993] CloseHandle (hObject=0xa4) returned 1 [0183.993] AreFileApisANSI () returned 1 [0183.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0183.994] CloseHandle (hObject=0xa4) returned 1 [0183.995] AreFileApisANSI () returned 1 [0183.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0184.003] CloseHandle (hObject=0xa4) returned 1 [0184.004] AreFileApisANSI () returned 1 [0184.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0184.014] CloseHandle (hObject=0xa4) returned 1 [0184.015] AreFileApisANSI () returned 1 [0184.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0184.016] CloseHandle (hObject=0xa4) returned 1 [0184.017] AreFileApisANSI () returned 1 [0184.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0184.021] CloseHandle (hObject=0xa4) returned 1 [0184.022] AreFileApisANSI () returned 1 [0184.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0184.024] CloseHandle (hObject=0xa0) returned 1 [0184.024] AreFileApisANSI () returned 1 [0184.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0184.026] CloseHandle (hObject=0xa0) returned 1 [0184.027] AreFileApisANSI () returned 1 [0184.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0184.028] CloseHandle (hObject=0xa0) returned 1 [0184.029] AreFileApisANSI () returned 1 [0184.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0184.033] CloseHandle (hObject=0xa4) returned 1 [0184.034] AreFileApisANSI () returned 1 [0184.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0184.036] CloseHandle (hObject=0xa4) returned 1 [0184.036] AreFileApisANSI () returned 1 [0184.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0184.037] CloseHandle (hObject=0xa4) returned 1 [0184.038] AreFileApisANSI () returned 1 [0184.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0184.040] CloseHandle (hObject=0xa8) returned 1 [0184.041] AreFileApisANSI () returned 1 [0184.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0184.051] CloseHandle (hObject=0xa8) returned 1 [0184.051] AreFileApisANSI () returned 1 [0184.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0184.053] CloseHandle (hObject=0xa8) returned 1 [0184.054] AreFileApisANSI () returned 1 [0184.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0184.056] CloseHandle (hObject=0xac) returned 1 [0184.057] AreFileApisANSI () returned 1 [0184.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0184.060] CloseHandle (hObject=0xac) returned 1 [0184.061] AreFileApisANSI () returned 1 [0184.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0184.062] CloseHandle (hObject=0xac) returned 1 [0184.064] AreFileApisANSI () returned 1 [0184.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0184.064] CloseHandle (hObject=0xb0) returned 1 [0184.065] AreFileApisANSI () returned 1 [0184.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0184.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 142 [0184.065] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\7cszdg21\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\7cszdg21\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0184.066] AreFileApisANSI () returned 1 [0184.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0184.067] CloseHandle (hObject=0xac) returned 1 [0184.067] AreFileApisANSI () returned 1 [0184.067] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0184.067] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0184.067] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0184.070] AreFileApisANSI () returned 1 [0184.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0184.077] CloseHandle (hObject=0xa8) returned 1 [0184.077] AreFileApisANSI () returned 1 [0184.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0184.079] CloseHandle (hObject=0xa8) returned 1 [0184.079] AreFileApisANSI () returned 1 [0184.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0184.081] CloseHandle (hObject=0xa8) returned 1 [0184.082] AreFileApisANSI () returned 1 [0184.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0184.082] CloseHandle (hObject=0xac) returned 1 [0184.082] AreFileApisANSI () returned 1 [0184.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0184.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0184.083] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0184.084] AreFileApisANSI () returned 1 [0184.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0184.086] CloseHandle (hObject=0xa8) returned 1 [0184.086] AreFileApisANSI () returned 1 [0184.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0184.273] CloseHandle (hObject=0xa8) returned 1 [0184.273] AreFileApisANSI () returned 1 [0184.273] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0184.274] CloseHandle (hObject=0xa8) returned 1 [0184.275] AreFileApisANSI () returned 1 [0184.275] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0184.275] CloseHandle (hObject=0xac) returned 1 [0184.276] AreFileApisANSI () returned 1 [0184.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0184.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0184.276] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0184.277] AreFileApisANSI () returned 1 [0184.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0184.278] CloseHandle (hObject=0xa8) returned 1 [0184.278] AreFileApisANSI () returned 1 [0184.278] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0184.280] CloseHandle (hObject=0xa8) returned 1 [0184.280] AreFileApisANSI () returned 1 [0184.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0184.283] CloseHandle (hObject=0xa8) returned 1 [0184.284] AreFileApisANSI () returned 1 [0184.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0184.285] CloseHandle (hObject=0xa8) returned 1 [0184.286] AreFileApisANSI () returned 1 [0184.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0184.289] CloseHandle (hObject=0xa8) returned 1 [0184.289] AreFileApisANSI () returned 1 [0184.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49be28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0184.291] CloseHandle (hObject=0xa8) returned 1 [0184.291] AreFileApisANSI () returned 1 [0184.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ecc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0184.294] CloseHandle (hObject=0xac) returned 1 [0184.294] AreFileApisANSI () returned 1 [0184.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0184.297] CloseHandle (hObject=0xac) returned 1 [0184.297] AreFileApisANSI () returned 1 [0184.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e6a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0184.298] CloseHandle (hObject=0xac) returned 1 [0184.299] AreFileApisANSI () returned 1 [0184.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e5c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 157 [0184.366] CloseHandle (hObject=0xb0) returned 1 [0184.367] AreFileApisANSI () returned 1 [0184.367] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ecc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0184.368] CloseHandle (hObject=0xb0) returned 1 [0184.369] AreFileApisANSI () returned 1 [0184.369] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 157 [0184.370] CloseHandle (hObject=0xb0) returned 1 [0184.371] AreFileApisANSI () returned 1 [0184.371] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f3c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 158 [0184.526] CloseHandle (hObject=0xb0) returned 1 [0184.527] AreFileApisANSI () returned 1 [0184.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f3c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0184.530] CloseHandle (hObject=0xb0) returned 1 [0184.531] AreFileApisANSI () returned 1 [0184.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 158 [0184.532] CloseHandle (hObject=0xb0) returned 1 [0184.533] AreFileApisANSI () returned 1 [0184.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0184.534] CloseHandle (hObject=0xac) returned 1 [0184.534] AreFileApisANSI () returned 1 [0184.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0184.536] CloseHandle (hObject=0xac) returned 1 [0184.550] AreFileApisANSI () returned 1 [0184.550] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0184.661] CloseHandle (hObject=0xac) returned 1 [0184.662] AreFileApisANSI () returned 1 [0184.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0184.663] CloseHandle (hObject=0xb0) returned 1 [0184.663] AreFileApisANSI () returned 1 [0184.663] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f040, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0184.666] CloseHandle (hObject=0xb0) returned 1 [0184.666] AreFileApisANSI () returned 1 [0184.666] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eda0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0184.667] CloseHandle (hObject=0xb0) returned 1 [0184.668] AreFileApisANSI () returned 1 [0184.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0184.669] CloseHandle (hObject=0xa8) returned 1 [0184.670] AreFileApisANSI () returned 1 [0184.670] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0184.671] CloseHandle (hObject=0xa8) returned 1 [0184.671] AreFileApisANSI () returned 1 [0184.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0184.698] CloseHandle (hObject=0xa8) returned 1 [0184.698] AreFileApisANSI () returned 1 [0184.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0184.699] CloseHandle (hObject=0xa4) returned 1 [0184.700] AreFileApisANSI () returned 1 [0184.700] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49be28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0184.701] CloseHandle (hObject=0xa4) returned 1 [0184.701] AreFileApisANSI () returned 1 [0184.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0184.703] CloseHandle (hObject=0xa4) returned 1 [0184.704] AreFileApisANSI () returned 1 [0184.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0184.705] CloseHandle (hObject=0xa4) returned 1 [0184.705] AreFileApisANSI () returned 1 [0184.705] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0184.706] CloseHandle (hObject=0xa4) returned 1 [0184.707] AreFileApisANSI () returned 1 [0184.707] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0184.709] CloseHandle (hObject=0xa4) returned 1 [0184.711] AreFileApisANSI () returned 1 [0184.711] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0184.712] CloseHandle (hObject=0xa4) returned 1 [0184.713] AreFileApisANSI () returned 1 [0184.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0184.714] CloseHandle (hObject=0xa4) returned 1 [0184.715] AreFileApisANSI () returned 1 [0184.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0184.774] CloseHandle (hObject=0xa4) returned 1 [0184.774] AreFileApisANSI () returned 1 [0184.774] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 204 [0186.926] CloseHandle (hObject=0xa4) returned 1 [0186.927] AreFileApisANSI () returned 1 [0186.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4969b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 201 [0186.928] GetFileType (hFile=0xa4) returned 0x1 [0186.928] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0186.929] CloseHandle (hObject=0xa4) returned 1 [0186.929] AreFileApisANSI () returned 1 [0186.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496d28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 204 [0186.930] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0186.930] GetFileType (hFile=0xa4) returned 0x1 [0186.930] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0186.931] CloseHandle (hObject=0xa4) returned 1 [0186.932] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x494f60 [0186.932] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0186.932] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0186.932] AreFileApisANSI () returned 1 [0186.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x488af8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 220 [0186.932] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0186.989] GetFileType (hFile=0xa8) returned 0x1 [0186.989] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0186.990] CloseHandle (hObject=0xa8) returned 1 [0186.990] AreFileApisANSI () returned 1 [0186.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x488af8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 217 [0186.990] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0186.991] GetFileType (hFile=0xa8) returned 0x1 [0186.991] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0186.991] CloseHandle (hObject=0xa8) returned 1 [0186.992] AreFileApisANSI () returned 1 [0186.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x488af8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 220 [0186.992] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0186.992] GetFileType (hFile=0xa8) returned 0x1 [0186.993] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0186.993] CloseHandle (hObject=0xa8) returned 1 [0186.994] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0x494fe0 [0186.994] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0186.994] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0186.994] AreFileApisANSI () returned 1 [0186.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 219 [0186.994] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0b8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0186.995] GetFileType (hFile=0xac) returned 0x1 [0186.995] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da168 | out: lpNewFilePointer=0x0) returned 1 [0186.995] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da11c | out: lpNewFilePointer=0x0) returned 1 [0186.995] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da14c | out: lpNewFilePointer=0x0) returned 1 [0186.995] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0186.995] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0186.995] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da14c | out: lpNewFilePointer=0x0) returned 1 [0186.995] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0186.995] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0186.995] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0186.998] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0186.998] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0186.998] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0186.998] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0186.998] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0186.998] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0186.998] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0186.998] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0186.999] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0186.999] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0186.999] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0186.999] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0186.999] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0186.999] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0186.999] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0186.999] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0186.999] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0186.999] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.000] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.000] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.000] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.000] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.001] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.001] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.001] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.001] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.001] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.001] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.001] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.002] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.002] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.002] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.002] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.002] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.002] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.002] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.002] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.002] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.002] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.003] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.003] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.003] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.003] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.003] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.003] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.003] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.003] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.004] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.004] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.004] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.004] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.004] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.004] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.004] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.005] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.005] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.005] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.006] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.006] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.006] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.006] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.006] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.006] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.006] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.006] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.006] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.006] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.006] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.006] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.007] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.007] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.007] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.007] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.007] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.007] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.007] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.007] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.007] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.007] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.007] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.007] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.008] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.008] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.008] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.008] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.009] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.009] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.009] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.010] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.010] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.010] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.010] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.011] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.011] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.011] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.011] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.011] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.011] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.011] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.011] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.011] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.011] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.011] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.011] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.012] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.012] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.012] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.012] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.012] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.012] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.012] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.012] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.012] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.012] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.012] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.012] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.012] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.013] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.013] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.013] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.013] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.013] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.013] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.013] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.013] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.013] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.013] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.013] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.013] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.014] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.014] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.014] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.014] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.014] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.014] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.014] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.014] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.014] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.014] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.014] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.014] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.014] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.015] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.015] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.015] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.015] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.015] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.015] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.015] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.015] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.015] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.015] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.015] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.015] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.016] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.016] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.016] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.016] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.023] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.023] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.023] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.023] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.023] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.023] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.023] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.023] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.024] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.024] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.024] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.024] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.024] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.024] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.024] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.024] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.024] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.024] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.024] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.025] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.025] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.025] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.025] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.025] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.025] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.025] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.025] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.025] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.025] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.025] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.026] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.026] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.026] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.026] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.026] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.026] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.026] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.026] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.026] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.026] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.026] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.026] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.027] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.027] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.027] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.027] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.027] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.027] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.027] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.027] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.027] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.027] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.027] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.027] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.028] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.028] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.028] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.028] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.028] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.028] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.028] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.028] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.028] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.028] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.028] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.028] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.029] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.029] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.030] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.030] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.030] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.031] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0187.031] WriteFile (in: hFile=0xac, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0187.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0187.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0187.032] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0187.032] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0187.032] ReadFile (in: hFile=0xac, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0187.032] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0187.032] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0187.032] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0187.069] CloseHandle (hObject=0xac) returned 1 [0187.071] AreFileApisANSI () returned 1 [0187.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 219 [0187.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3eb8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 228 [0187.071] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0187.073] AreFileApisANSI () returned 1 [0187.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0187.075] CloseHandle (hObject=0xa4) returned 1 [0187.075] AreFileApisANSI () returned 1 [0187.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0187.076] CloseHandle (hObject=0xa4) returned 1 [0187.077] AreFileApisANSI () returned 1 [0187.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0187.080] CloseHandle (hObject=0xa4) returned 1 [0187.081] AreFileApisANSI () returned 1 [0187.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0187.142] CloseHandle (hObject=0xa4) returned 1 [0187.142] AreFileApisANSI () returned 1 [0187.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0187.146] CloseHandle (hObject=0xa4) returned 1 [0187.147] AreFileApisANSI () returned 1 [0187.147] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0187.149] CloseHandle (hObject=0xa4) returned 1 [0187.150] AreFileApisANSI () returned 1 [0187.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0187.175] CloseHandle (hObject=0xa8) returned 1 [0187.175] AreFileApisANSI () returned 1 [0187.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0187.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0187.175] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0187.177] AreFileApisANSI () returned 1 [0187.177] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5838, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0187.178] CloseHandle (hObject=0xa4) returned 1 [0187.178] AreFileApisANSI () returned 1 [0187.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0187.179] CloseHandle (hObject=0xa4) returned 1 [0187.179] AreFileApisANSI () returned 1 [0187.179] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0187.289] CloseHandle (hObject=0xa4) returned 1 [0187.290] AreFileApisANSI () returned 1 [0187.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0187.291] CloseHandle (hObject=0xa4) returned 1 [0187.292] AreFileApisANSI () returned 1 [0187.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0187.293] CloseHandle (hObject=0xa4) returned 1 [0187.293] AreFileApisANSI () returned 1 [0187.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0187.380] CloseHandle (hObject=0xa4) returned 1 [0187.380] AreFileApisANSI () returned 1 [0187.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0187.384] GetFileType (hFile=0xa0) returned 0x1 [0187.385] CloseHandle (hObject=0xa0) returned 1 [0187.385] AreFileApisANSI () returned 1 [0187.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0187.386] CloseHandle (hObject=0xa0) returned 1 [0187.387] AreFileApisANSI () returned 1 [0187.387] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0187.388] CloseHandle (hObject=0xa0) returned 1 [0187.389] AreFileApisANSI () returned 1 [0187.389] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0187.393] CloseHandle (hObject=0xa4) returned 1 [0187.394] AreFileApisANSI () returned 1 [0187.394] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0187.395] CloseHandle (hObject=0xa4) returned 1 [0187.396] AreFileApisANSI () returned 1 [0187.396] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0187.397] CloseHandle (hObject=0xa4) returned 1 [0187.397] AreFileApisANSI () returned 1 [0187.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 147 [0187.399] CloseHandle (hObject=0xa8) returned 1 [0187.399] AreFileApisANSI () returned 1 [0187.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0187.454] CloseHandle (hObject=0xa8) returned 1 [0187.455] AreFileApisANSI () returned 1 [0187.455] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 147 [0187.456] CloseHandle (hObject=0xa8) returned 1 [0187.458] AreFileApisANSI () returned 1 [0187.458] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0187.463] CloseHandle (hObject=0xa8) returned 1 [0187.464] AreFileApisANSI () returned 1 [0187.464] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a55e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0187.465] CloseHandle (hObject=0xa8) returned 1 [0187.466] AreFileApisANSI () returned 1 [0187.466] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0187.467] CloseHandle (hObject=0xa8) returned 1 [0187.468] AreFileApisANSI () returned 1 [0187.468] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0187.469] CloseHandle (hObject=0xac) returned 1 [0187.469] AreFileApisANSI () returned 1 [0187.469] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0187.469] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0187.469] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0187.471] AreFileApisANSI () returned 1 [0187.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0187.473] CloseHandle (hObject=0xa8) returned 1 [0187.474] AreFileApisANSI () returned 1 [0187.474] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0187.477] CloseHandle (hObject=0xa8) returned 1 [0187.478] AreFileApisANSI () returned 1 [0187.478] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a55e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0187.479] CloseHandle (hObject=0xa8) returned 1 [0187.480] AreFileApisANSI () returned 1 [0187.480] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0187.481] CloseHandle (hObject=0xac) returned 1 [0187.481] AreFileApisANSI () returned 1 [0187.481] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0187.481] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 139 [0187.481] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0187.483] AreFileApisANSI () returned 1 [0187.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0187.552] CloseHandle (hObject=0xa8) returned 1 [0187.553] AreFileApisANSI () returned 1 [0187.553] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a55e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0187.554] CloseHandle (hObject=0xa8) returned 1 [0187.554] AreFileApisANSI () returned 1 [0187.554] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0187.555] CloseHandle (hObject=0xa8) returned 1 [0187.556] AreFileApisANSI () returned 1 [0187.556] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ea20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0187.557] CloseHandle (hObject=0xac) returned 1 [0187.558] AreFileApisANSI () returned 1 [0187.558] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ebe0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0187.560] CloseHandle (hObject=0xac) returned 1 [0187.560] AreFileApisANSI () returned 1 [0187.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ebe0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0187.561] CloseHandle (hObject=0xac) returned 1 [0187.562] AreFileApisANSI () returned 1 [0187.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0187.562] CloseHandle (hObject=0xb0) returned 1 [0187.563] AreFileApisANSI () returned 1 [0187.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0187.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1128, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0187.563] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0187.565] AreFileApisANSI () returned 1 [0187.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ea20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0187.567] CloseHandle (hObject=0xac) returned 1 [0187.567] AreFileApisANSI () returned 1 [0187.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f040, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0187.570] CloseHandle (hObject=0xac) returned 1 [0187.571] AreFileApisANSI () returned 1 [0187.571] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0187.574] CloseHandle (hObject=0xac) returned 1 [0187.575] AreFileApisANSI () returned 1 [0187.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0187.576] GetFileType (hFile=0xa8) returned 0x1 [0187.577] CloseHandle (hObject=0xa8) returned 1 [0187.577] AreFileApisANSI () returned 1 [0187.578] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5838, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0187.581] CloseHandle (hObject=0xa8) returned 1 [0187.582] AreFileApisANSI () returned 1 [0187.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5838, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0187.583] CloseHandle (hObject=0xa8) returned 1 [0187.584] AreFileApisANSI () returned 1 [0187.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f3c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0187.585] CloseHandle (hObject=0xac) returned 1 [0187.586] AreFileApisANSI () returned 1 [0187.586] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ecc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0187.659] CloseHandle (hObject=0xac) returned 1 [0187.660] AreFileApisANSI () returned 1 [0187.660] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0187.661] CloseHandle (hObject=0xac) returned 1 [0187.661] AreFileApisANSI () returned 1 [0187.661] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 160 [0187.714] GetFileType (hFile=0xb0) returned 0x1 [0187.716] CloseHandle (hObject=0xb0) returned 1 [0187.716] AreFileApisANSI () returned 1 [0187.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 157 [0187.717] CloseHandle (hObject=0xb0) returned 1 [0187.718] AreFileApisANSI () returned 1 [0187.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 160 [0187.719] CloseHandle (hObject=0xb0) returned 1 [0187.720] AreFileApisANSI () returned 1 [0187.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ef60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0187.822] CloseHandle (hObject=0xb0) returned 1 [0187.822] AreFileApisANSI () returned 1 [0187.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 158 [0187.824] CloseHandle (hObject=0xb0) returned 1 [0187.824] AreFileApisANSI () returned 1 [0187.824] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0187.825] CloseHandle (hObject=0xb0) returned 1 [0187.826] AreFileApisANSI () returned 1 [0187.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0187.829] CloseHandle (hObject=0xac) returned 1 [0187.830] AreFileApisANSI () returned 1 [0187.830] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5838, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0187.831] CloseHandle (hObject=0xac) returned 1 [0187.832] AreFileApisANSI () returned 1 [0187.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0187.923] CloseHandle (hObject=0xac) returned 1 [0187.924] AreFileApisANSI () returned 1 [0187.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0187.926] CloseHandle (hObject=0xb0) returned 1 [0187.927] AreFileApisANSI () returned 1 [0187.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eda0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0187.930] CloseHandle (hObject=0xb0) returned 1 [0187.930] AreFileApisANSI () returned 1 [0187.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e5c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0187.932] CloseHandle (hObject=0xb0) returned 1 [0187.932] AreFileApisANSI () returned 1 [0187.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0187.934] CloseHandle (hObject=0xa8) returned 1 [0187.934] AreFileApisANSI () returned 1 [0187.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0187.936] CloseHandle (hObject=0xa8) returned 1 [0187.936] AreFileApisANSI () returned 1 [0187.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0187.939] CloseHandle (hObject=0xa8) returned 1 [0187.940] AreFileApisANSI () returned 1 [0187.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0187.942] CloseHandle (hObject=0xa4) returned 1 [0187.943] AreFileApisANSI () returned 1 [0187.943] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0187.944] CloseHandle (hObject=0xa4) returned 1 [0187.945] AreFileApisANSI () returned 1 [0187.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0187.973] CloseHandle (hObject=0xa4) returned 1 [0187.973] AreFileApisANSI () returned 1 [0187.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0187.975] CloseHandle (hObject=0xa4) returned 1 [0187.976] AreFileApisANSI () returned 1 [0187.976] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0187.977] CloseHandle (hObject=0xa4) returned 1 [0187.978] AreFileApisANSI () returned 1 [0187.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0188.073] CloseHandle (hObject=0xa4) returned 1 [0188.074] AreFileApisANSI () returned 1 [0188.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0188.079] CloseHandle (hObject=0xa4) returned 1 [0188.079] AreFileApisANSI () returned 1 [0188.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0188.081] CloseHandle (hObject=0xa4) returned 1 [0188.081] AreFileApisANSI () returned 1 [0188.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0188.083] CloseHandle (hObject=0xa4) returned 1 [0188.083] AreFileApisANSI () returned 1 [0188.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0188.088] CloseHandle (hObject=0xa8) returned 1 [0188.088] AreFileApisANSI () returned 1 [0188.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0188.090] CloseHandle (hObject=0xa8) returned 1 [0188.090] AreFileApisANSI () returned 1 [0188.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0188.092] CloseHandle (hObject=0xa8) returned 1 [0188.094] AreFileApisANSI () returned 1 [0188.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ecc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0188.096] CloseHandle (hObject=0xa8) returned 1 [0188.096] AreFileApisANSI () returned 1 [0188.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0188.100] CloseHandle (hObject=0xa8) returned 1 [0188.100] AreFileApisANSI () returned 1 [0188.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0188.102] CloseHandle (hObject=0xa8) returned 1 [0188.102] AreFileApisANSI () returned 1 [0188.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f3c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0188.108] CloseHandle (hObject=0xac) returned 1 [0188.108] AreFileApisANSI () returned 1 [0188.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0188.109] CloseHandle (hObject=0xac) returned 1 [0188.110] AreFileApisANSI () returned 1 [0188.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0188.111] CloseHandle (hObject=0xac) returned 1 [0188.112] AreFileApisANSI () returned 1 [0188.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3fb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0188.174] CloseHandle (hObject=0xb0) returned 1 [0188.175] AreFileApisANSI () returned 1 [0188.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3fb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 168 [0188.176] CloseHandle (hObject=0xb0) returned 1 [0188.177] AreFileApisANSI () returned 1 [0188.177] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3ad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0188.178] CloseHandle (hObject=0xb0) returned 1 [0188.179] AreFileApisANSI () returned 1 [0188.179] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0188.180] CloseHandle (hObject=0xb4) returned 1 [0188.181] AreFileApisANSI () returned 1 [0188.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0188.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a04f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 176 [0188.181] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat.cryptoid"), dwFlags=0x2) returned 1 [0188.182] AreFileApisANSI () returned 1 [0188.182] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0188.184] CloseHandle (hObject=0xb4) returned 1 [0188.184] AreFileApisANSI () returned 1 [0188.184] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0188.184] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1128, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0188.184] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat.cryptoid"), dwFlags=0x2) returned 1 [0188.186] AreFileApisANSI () returned 1 [0188.186] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a37f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0188.235] CloseHandle (hObject=0xb0) returned 1 [0188.236] AreFileApisANSI () returned 1 [0188.236] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3ad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 168 [0188.237] CloseHandle (hObject=0xb0) returned 1 [0188.237] AreFileApisANSI () returned 1 [0188.237] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3fb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0188.238] CloseHandle (hObject=0xb0) returned 1 [0188.238] AreFileApisANSI () returned 1 [0188.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0188.239] CloseHandle (hObject=0xb4) returned 1 [0188.239] AreFileApisANSI () returned 1 [0188.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0188.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a05a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 176 [0188.239] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat.cryptoid"), dwFlags=0x2) returned 1 [0188.240] AreFileApisANSI () returned 1 [0188.240] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0188.240] CloseHandle (hObject=0xb4) returned 1 [0188.240] AreFileApisANSI () returned 1 [0188.240] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0188.241] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0d90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0188.241] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat.cryptoid"), dwFlags=0x2) returned 1 [0188.241] AreFileApisANSI () returned 1 [0188.241] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3fb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0188.244] CloseHandle (hObject=0xb0) returned 1 [0188.244] AreFileApisANSI () returned 1 [0188.244] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a36f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 168 [0188.245] CloseHandle (hObject=0xb0) returned 1 [0188.245] AreFileApisANSI () returned 1 [0188.245] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3dc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0188.246] CloseHandle (hObject=0xb0) returned 1 [0188.247] AreFileApisANSI () returned 1 [0188.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0188.248] CloseHandle (hObject=0xb4) returned 1 [0188.248] AreFileApisANSI () returned 1 [0188.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0188.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a07d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 176 [0188.248] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat.cryptoid"), dwFlags=0x2) returned 1 [0188.249] AreFileApisANSI () returned 1 [0188.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0188.249] CloseHandle (hObject=0xb4) returned 1 [0188.250] AreFileApisANSI () returned 1 [0188.250] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0188.250] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0ab0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0188.250] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat.cryptoid"), dwFlags=0x2) returned 1 [0188.251] AreFileApisANSI () returned 1 [0188.251] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a40a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0188.255] CloseHandle (hObject=0xb0) returned 1 [0188.256] AreFileApisANSI () returned 1 [0188.256] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a4298, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 168 [0188.257] CloseHandle (hObject=0xb0) returned 1 [0188.257] AreFileApisANSI () returned 1 [0188.257] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a4390, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0188.258] CloseHandle (hObject=0xb0) returned 1 [0188.258] AreFileApisANSI () returned 1 [0188.258] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0188.259] CloseHandle (hObject=0xb4) returned 1 [0188.259] AreFileApisANSI () returned 1 [0188.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0188.259] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0d90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 176 [0188.259] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat.cryptoid"), dwFlags=0x2) returned 1 [0188.260] AreFileApisANSI () returned 1 [0188.260] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0188.260] CloseHandle (hObject=0xb4) returned 1 [0188.261] AreFileApisANSI () returned 1 [0188.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0188.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0f00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0188.261] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat.cryptoid"), dwFlags=0x2) returned 1 [0188.261] AreFileApisANSI () returned 1 [0188.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a4298, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0188.444] CloseHandle (hObject=0xb0) returned 1 [0188.445] AreFileApisANSI () returned 1 [0188.445] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a37f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 168 [0188.447] CloseHandle (hObject=0xb0) returned 1 [0188.447] AreFileApisANSI () returned 1 [0188.447] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0188.448] CloseHandle (hObject=0xb0) returned 1 [0188.448] AreFileApisANSI () returned 1 [0188.448] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0188.449] CloseHandle (hObject=0xb4) returned 1 [0188.449] AreFileApisANSI () returned 1 [0188.449] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0188.449] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0888, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 176 [0188.449] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat.cryptoid"), dwFlags=0x2) returned 1 [0188.450] AreFileApisANSI () returned 1 [0188.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0188.451] CloseHandle (hObject=0xb4) returned 1 [0188.451] AreFileApisANSI () returned 1 [0188.451] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0188.451] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1298, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0188.451] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat.cryptoid"), dwFlags=0x2) returned 1 [0188.452] AreFileApisANSI () returned 1 [0188.452] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0188.555] CloseHandle (hObject=0xb0) returned 1 [0188.556] AreFileApisANSI () returned 1 [0188.556] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3fb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 168 [0188.557] CloseHandle (hObject=0xb0) returned 1 [0188.557] AreFileApisANSI () returned 1 [0188.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3fb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0188.558] CloseHandle (hObject=0xb0) returned 1 [0188.558] AreFileApisANSI () returned 1 [0188.558] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0188.558] CloseHandle (hObject=0xb4) returned 1 [0188.559] AreFileApisANSI () returned 1 [0188.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0188.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1408, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 176 [0188.559] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat.cryptoid"), dwFlags=0x2) returned 1 [0188.560] AreFileApisANSI () returned 1 [0188.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0188.560] CloseHandle (hObject=0xb4) returned 1 [0188.560] AreFileApisANSI () returned 1 [0188.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0188.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0188.560] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat.cryptoid"), dwFlags=0x2) returned 1 [0188.561] AreFileApisANSI () returned 1 [0188.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3bd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0188.563] CloseHandle (hObject=0xb0) returned 1 [0188.564] AreFileApisANSI () returned 1 [0188.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a40a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 168 [0188.565] CloseHandle (hObject=0xb0) returned 1 [0188.565] AreFileApisANSI () returned 1 [0188.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a36f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0188.566] CloseHandle (hObject=0xb0) returned 1 [0188.567] AreFileApisANSI () returned 1 [0188.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0188.567] CloseHandle (hObject=0xb4) returned 1 [0188.567] AreFileApisANSI () returned 1 [0188.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0188.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1298, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 176 [0188.567] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat.cryptoid"), dwFlags=0x2) returned 1 [0188.569] AreFileApisANSI () returned 1 [0188.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0188.569] CloseHandle (hObject=0xb4) returned 1 [0188.569] AreFileApisANSI () returned 1 [0188.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0188.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0188.570] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat.cryptoid"), dwFlags=0x2) returned 1 [0188.570] AreFileApisANSI () returned 1 [0188.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5838, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0188.571] CloseHandle (hObject=0xa8) returned 1 [0188.572] AreFileApisANSI () returned 1 [0188.572] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0188.573] CloseHandle (hObject=0xa8) returned 1 [0188.574] AreFileApisANSI () returned 1 [0188.574] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0188.575] CloseHandle (hObject=0xa8) returned 1 [0188.575] AreFileApisANSI () returned 1 [0188.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0188.576] CloseHandle (hObject=0xa8) returned 1 [0188.577] AreFileApisANSI () returned 1 [0188.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a55e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0188.577] CloseHandle (hObject=0xa8) returned 1 [0188.578] AreFileApisANSI () returned 1 [0188.578] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5838, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0188.579] CloseHandle (hObject=0xa8) returned 1 [0188.580] AreFileApisANSI () returned 1 [0188.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496638, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 210 [0188.628] CloseHandle (hObject=0xa4) returned 1 [0188.629] AreFileApisANSI () returned 1 [0188.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496638, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 207 [0188.630] CloseHandle (hObject=0xa4) returned 1 [0188.630] AreFileApisANSI () returned 1 [0188.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 210 [0188.631] CloseHandle (hObject=0xa4) returned 1 [0188.632] AreFileApisANSI () returned 1 [0188.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a4b78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 226 [0188.635] CloseHandle (hObject=0xa8) returned 1 [0188.635] AreFileApisANSI () returned 1 [0188.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a4b78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 223 [0188.636] CloseHandle (hObject=0xa8) returned 1 [0188.636] AreFileApisANSI () returned 1 [0188.636] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a4b78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 226 [0188.637] CloseHandle (hObject=0xa8) returned 1 [0188.637] AreFileApisANSI () returned 1 [0188.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 225 [0188.672] CloseHandle (hObject=0xac) returned 1 [0188.673] AreFileApisANSI () returned 1 [0188.673] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 225 [0188.673] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 234 [0188.673] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0188.674] AreFileApisANSI () returned 1 [0188.674] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0188.676] CloseHandle (hObject=0xa4) returned 1 [0188.676] AreFileApisANSI () returned 1 [0188.676] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0188.677] CloseHandle (hObject=0xa4) returned 1 [0188.677] AreFileApisANSI () returned 1 [0188.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a55e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0188.724] CloseHandle (hObject=0xa4) returned 1 [0188.724] AreFileApisANSI () returned 1 [0188.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0188.728] CloseHandle (hObject=0xa4) returned 1 [0188.728] AreFileApisANSI () returned 1 [0188.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0188.729] CloseHandle (hObject=0xa4) returned 1 [0188.730] AreFileApisANSI () returned 1 [0188.730] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0188.730] CloseHandle (hObject=0xa4) returned 1 [0188.731] AreFileApisANSI () returned 1 [0188.731] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0188.801] CloseHandle (hObject=0xa8) returned 1 [0188.801] AreFileApisANSI () returned 1 [0188.801] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0188.802] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0188.802] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0188.803] AreFileApisANSI () returned 1 [0188.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0188.804] CloseHandle (hObject=0xa4) returned 1 [0188.804] AreFileApisANSI () returned 1 [0188.804] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0188.805] CloseHandle (hObject=0xa4) returned 1 [0188.805] AreFileApisANSI () returned 1 [0188.805] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0188.807] CloseHandle (hObject=0xa4) returned 1 [0188.808] AreFileApisANSI () returned 1 [0188.808] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0188.809] CloseHandle (hObject=0xa4) returned 1 [0188.809] AreFileApisANSI () returned 1 [0188.809] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0188.810] CloseHandle (hObject=0xa4) returned 1 [0188.810] AreFileApisANSI () returned 1 [0188.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0188.893] CloseHandle (hObject=0xa4) returned 1 [0188.893] AreFileApisANSI () returned 1 [0188.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0188.895] CloseHandle (hObject=0xa0) returned 1 [0188.895] AreFileApisANSI () returned 1 [0188.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0188.896] CloseHandle (hObject=0xa0) returned 1 [0188.896] AreFileApisANSI () returned 1 [0188.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0188.897] CloseHandle (hObject=0xa0) returned 1 [0188.898] AreFileApisANSI () returned 1 [0188.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0188.898] CloseHandle (hObject=0xa4) returned 1 [0188.899] AreFileApisANSI () returned 1 [0188.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0188.900] CloseHandle (hObject=0xa4) returned 1 [0188.900] AreFileApisANSI () returned 1 [0188.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0188.901] CloseHandle (hObject=0xa4) returned 1 [0188.901] AreFileApisANSI () returned 1 [0188.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0189.027] CloseHandle (hObject=0xa8) returned 1 [0189.028] AreFileApisANSI () returned 1 [0189.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0189.135] CloseHandle (hObject=0xa8) returned 1 [0189.135] AreFileApisANSI () returned 1 [0189.135] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0189.156] CloseHandle (hObject=0xa8) returned 1 [0189.157] AreFileApisANSI () returned 1 [0189.157] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0189.157] CloseHandle (hObject=0xac) returned 1 [0189.158] AreFileApisANSI () returned 1 [0189.158] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0189.158] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2f18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0189.158] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0189.159] AreFileApisANSI () returned 1 [0189.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0189.160] CloseHandle (hObject=0xac) returned 1 [0189.160] AreFileApisANSI () returned 1 [0189.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.161] CloseHandle (hObject=0xac) returned 1 [0189.162] AreFileApisANSI () returned 1 [0189.162] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0189.162] CloseHandle (hObject=0xac) returned 1 [0189.163] AreFileApisANSI () returned 1 [0189.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0189.222] GetFileType (hFile=0xb0) returned 0x1 [0189.223] CloseHandle (hObject=0xb0) returned 1 [0189.223] AreFileApisANSI () returned 1 [0189.223] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0189.224] CloseHandle (hObject=0xb0) returned 1 [0189.225] AreFileApisANSI () returned 1 [0189.225] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0189.226] CloseHandle (hObject=0xb0) returned 1 [0189.226] AreFileApisANSI () returned 1 [0189.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0189.226] CloseHandle (hObject=0xb4) returned 1 [0189.227] AreFileApisANSI () returned 1 [0189.227] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0189.227] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0189.227] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0189.228] AreFileApisANSI () returned 1 [0189.228] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0189.229] CloseHandle (hObject=0xb0) returned 1 [0189.229] AreFileApisANSI () returned 1 [0189.229] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0189.230] CloseHandle (hObject=0xb0) returned 1 [0189.230] AreFileApisANSI () returned 1 [0189.230] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0189.232] CloseHandle (hObject=0xb0) returned 1 [0189.232] AreFileApisANSI () returned 1 [0189.232] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.240] CloseHandle (hObject=0xb4) returned 1 [0189.240] AreFileApisANSI () returned 1 [0189.240] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.240] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0189.240] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\045d3532[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\045d3532[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\045d3532[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\045d3532[1].js.cryptoid"), dwFlags=0x2) returned 1 [0189.242] AreFileApisANSI () returned 1 [0189.242] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.261] CloseHandle (hObject=0xb4) returned 1 [0189.261] AreFileApisANSI () returned 1 [0189.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0189.261] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\0c3a2f0b[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\0c3a2f0b[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\0c3a2f0b[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\0c3a2f0b[1].js.cryptoid"), dwFlags=0x2) returned 1 [0189.263] AreFileApisANSI () returned 1 [0189.263] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.308] CloseHandle (hObject=0xb4) returned 1 [0189.308] AreFileApisANSI () returned 1 [0189.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0189.308] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\2462f13c[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\2462f13c[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\2462f13c[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\2462f13c[1].js.cryptoid"), dwFlags=0x2) returned 1 [0189.309] AreFileApisANSI () returned 1 [0189.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.477] CloseHandle (hObject=0xb4) returned 1 [0189.477] AreFileApisANSI () returned 1 [0189.477] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.477] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0189.477] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\2b0d6a57[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\2b0d6a57[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\2b0d6a57[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\2b0d6a57[1].js.cryptoid"), dwFlags=0x2) returned 1 [0189.479] AreFileApisANSI () returned 1 [0189.479] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.508] CloseHandle (hObject=0xb4) returned 1 [0189.509] AreFileApisANSI () returned 1 [0189.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0189.509] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\3417f6c5[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\3417f6c5[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\3417f6c5[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\3417f6c5[1].js.cryptoid"), dwFlags=0x2) returned 1 [0189.510] AreFileApisANSI () returned 1 [0189.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.550] CloseHandle (hObject=0xb4) returned 1 [0189.551] AreFileApisANSI () returned 1 [0189.551] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.551] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0189.551] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\359d2aee[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\359d2aee[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\359d2aee[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\359d2aee[1].js.cryptoid"), dwFlags=0x2) returned 1 [0189.552] AreFileApisANSI () returned 1 [0189.552] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.567] CloseHandle (hObject=0xb4) returned 1 [0189.568] AreFileApisANSI () returned 1 [0189.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0189.568] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\48a99eae[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\48a99eae[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\48a99eae[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\48a99eae[1].js.cryptoid"), dwFlags=0x2) returned 1 [0189.570] AreFileApisANSI () returned 1 [0189.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.615] CloseHandle (hObject=0xb4) returned 1 [0189.616] AreFileApisANSI () returned 1 [0189.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0189.616] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\5bf5eed4[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\5bf5eed4[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\5bf5eed4[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\5bf5eed4[1].js.cryptoid"), dwFlags=0x2) returned 1 [0189.617] AreFileApisANSI () returned 1 [0189.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.699] CloseHandle (hObject=0xb4) returned 1 [0189.699] AreFileApisANSI () returned 1 [0189.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0189.700] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\8636b4dd[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\8636b4dd[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\8636b4dd[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\8636b4dd[1].js.cryptoid"), dwFlags=0x2) returned 1 [0189.701] AreFileApisANSI () returned 1 [0189.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.802] CloseHandle (hObject=0xb4) returned 1 [0189.802] AreFileApisANSI () returned 1 [0189.802] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.802] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0189.802] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\89c17add[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\89c17add[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\89c17add[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\89c17add[1].js.cryptoid"), dwFlags=0x2) returned 1 [0189.804] AreFileApisANSI () returned 1 [0189.804] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.839] CloseHandle (hObject=0xb4) returned 1 [0189.840] AreFileApisANSI () returned 1 [0189.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0189.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0189.840] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\a5323b5f[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\a5323b5f[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\a5323b5f[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\a5323b5f[1].js.cryptoid"), dwFlags=0x2) returned 1 [0189.841] AreFileApisANSI () returned 1 [0189.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0190.278] CloseHandle (hObject=0xb4) returned 1 [0190.294] AreFileApisANSI () returned 1 [0190.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0190.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0190.294] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\b7511cfd[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\b7511cfd[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\b7511cfd[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\b7511cfd[1].js.cryptoid"), dwFlags=0x2) returned 1 [0190.295] AreFileApisANSI () returned 1 [0190.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0190.296] CloseHandle (hObject=0xb4) returned 1 [0190.296] AreFileApisANSI () returned 1 [0190.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0190.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0190.296] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0190.297] AreFileApisANSI () returned 1 [0190.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0190.475] CloseHandle (hObject=0xb4) returned 1 [0190.476] AreFileApisANSI () returned 1 [0190.476] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0190.476] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0190.476] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\dbef2181[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\dbef2181[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\dbef2181[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\dbef2181[1].js.cryptoid"), dwFlags=0x2) returned 1 [0190.477] AreFileApisANSI () returned 1 [0190.477] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0190.582] CloseHandle (hObject=0xb4) returned 1 [0190.583] AreFileApisANSI () returned 1 [0190.583] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0190.583] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0190.583] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\e1e405d1[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\e1e405d1[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\e1e405d1[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\e1e405d1[1].js.cryptoid"), dwFlags=0x2) returned 1 [0190.583] AreFileApisANSI () returned 1 [0190.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0190.600] CloseHandle (hObject=0xb4) returned 1 [0190.600] AreFileApisANSI () returned 1 [0190.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0190.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0190.600] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\e3f307cb[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\e3f307cb[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\e3f307cb[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\e3f307cb[1].js.cryptoid"), dwFlags=0x2) returned 1 [0190.601] AreFileApisANSI () returned 1 [0190.601] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0190.632] CloseHandle (hObject=0xb4) returned 1 [0190.633] AreFileApisANSI () returned 1 [0190.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0190.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0190.633] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\fcd21029[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\fcd21029[1].js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\25\\fcd21029[1].js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\25\\fcd21029[1].js.cryptoid"), dwFlags=0x2) returned 1 [0190.634] AreFileApisANSI () returned 1 [0190.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0190.695] GetFileType (hFile=0xb0) returned 0x1 [0190.696] CloseHandle (hObject=0xb0) returned 1 [0190.696] AreFileApisANSI () returned 1 [0190.696] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0190.697] CloseHandle (hObject=0xb0) returned 1 [0190.698] AreFileApisANSI () returned 1 [0190.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0190.698] CloseHandle (hObject=0xb0) returned 1 [0190.699] AreFileApisANSI () returned 1 [0190.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0190.699] CloseHandle (hObject=0xb4) returned 1 [0190.699] AreFileApisANSI () returned 1 [0190.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0190.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0190.699] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0190.700] AreFileApisANSI () returned 1 [0190.700] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0190.702] GetFileType (hFile=0xb0) returned 0x1 [0190.702] CloseHandle (hObject=0xb0) returned 1 [0190.703] AreFileApisANSI () returned 1 [0190.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0190.704] CloseHandle (hObject=0xb0) returned 1 [0190.704] AreFileApisANSI () returned 1 [0190.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0190.705] CloseHandle (hObject=0xb0) returned 1 [0190.705] AreFileApisANSI () returned 1 [0190.705] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0190.706] CloseHandle (hObject=0xb4) returned 1 [0190.706] AreFileApisANSI () returned 1 [0190.706] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0190.706] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0190.706] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0190.707] AreFileApisANSI () returned 1 [0190.707] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0190.707] CloseHandle (hObject=0xb0) returned 1 [0190.707] AreFileApisANSI () returned 1 [0190.707] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0190.707] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0190.708] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0190.708] AreFileApisANSI () returned 1 [0190.708] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0190.709] CloseHandle (hObject=0xa8) returned 1 [0190.709] AreFileApisANSI () returned 1 [0190.709] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0190.711] CloseHandle (hObject=0xa8) returned 1 [0190.711] AreFileApisANSI () returned 1 [0190.711] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0190.712] CloseHandle (hObject=0xa8) returned 1 [0190.712] AreFileApisANSI () returned 1 [0190.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0190.713] CloseHandle (hObject=0xa8) returned 1 [0190.714] AreFileApisANSI () returned 1 [0190.714] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0190.715] CloseHandle (hObject=0xa8) returned 1 [0190.715] AreFileApisANSI () returned 1 [0190.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0190.716] CloseHandle (hObject=0xa8) returned 1 [0190.717] AreFileApisANSI () returned 1 [0190.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0190.719] CloseHandle (hObject=0xac) returned 1 [0190.719] AreFileApisANSI () returned 1 [0190.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0190.785] CloseHandle (hObject=0xac) returned 1 [0190.785] AreFileApisANSI () returned 1 [0190.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0190.786] CloseHandle (hObject=0xac) returned 1 [0190.787] AreFileApisANSI () returned 1 [0190.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0190.787] CloseHandle (hObject=0xac) returned 1 [0190.787] AreFileApisANSI () returned 1 [0190.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0190.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a32d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0190.787] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0190.788] AreFileApisANSI () returned 1 [0190.788] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0190.789] CloseHandle (hObject=0xac) returned 1 [0190.789] AreFileApisANSI () returned 1 [0190.789] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0190.791] CloseHandle (hObject=0xac) returned 1 [0190.791] AreFileApisANSI () returned 1 [0190.791] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0190.792] CloseHandle (hObject=0xac) returned 1 [0190.793] AreFileApisANSI () returned 1 [0190.793] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0190.810] CloseHandle (hObject=0xa8) returned 1 [0190.811] AreFileApisANSI () returned 1 [0190.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0190.812] CloseHandle (hObject=0xa8) returned 1 [0190.812] AreFileApisANSI () returned 1 [0190.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0190.813] CloseHandle (hObject=0xa8) returned 1 [0190.814] AreFileApisANSI () returned 1 [0190.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0190.814] CloseHandle (hObject=0xac) returned 1 [0190.814] AreFileApisANSI () returned 1 [0190.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0190.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2be8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0190.814] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0190.815] AreFileApisANSI () returned 1 [0190.815] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0190.817] CloseHandle (hObject=0xac) returned 1 [0190.817] AreFileApisANSI () returned 1 [0190.817] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0190.817] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0190.817] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\F5G19VES.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\f5g19ves.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\F5G19VES.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\f5g19ves.txt.cryptoid"), dwFlags=0x2) returned 1 [0190.818] AreFileApisANSI () returned 1 [0190.818] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0190.819] CloseHandle (hObject=0xac) returned 1 [0190.819] AreFileApisANSI () returned 1 [0190.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0190.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2e90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0190.819] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\lvkkmmvn.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\lvkkmmvn.txt.cryptoid"), dwFlags=0x2) returned 1 [0190.820] AreFileApisANSI () returned 1 [0190.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0190.822] CloseHandle (hObject=0xa8) returned 1 [0190.822] AreFileApisANSI () returned 1 [0190.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0190.823] CloseHandle (hObject=0xa8) returned 1 [0190.824] AreFileApisANSI () returned 1 [0190.824] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0190.825] CloseHandle (hObject=0xa8) returned 1 [0190.825] AreFileApisANSI () returned 1 [0190.825] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0190.827] CloseHandle (hObject=0xac) returned 1 [0190.827] AreFileApisANSI () returned 1 [0190.827] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 141 [0190.829] CloseHandle (hObject=0xac) returned 1 [0190.830] AreFileApisANSI () returned 1 [0190.830] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0190.830] CloseHandle (hObject=0xac) returned 1 [0190.831] AreFileApisANSI () returned 1 [0190.831] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0190.831] CloseHandle (hObject=0xb0) returned 1 [0190.832] AreFileApisANSI () returned 1 [0190.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0190.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49af60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0190.832] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0190.833] AreFileApisANSI () returned 1 [0190.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f3c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0190.834] CloseHandle (hObject=0xac) returned 1 [0190.834] AreFileApisANSI () returned 1 [0190.834] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0190.916] CloseHandle (hObject=0xac) returned 1 [0190.917] AreFileApisANSI () returned 1 [0190.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0190.918] CloseHandle (hObject=0xac) returned 1 [0190.918] AreFileApisANSI () returned 1 [0190.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 142 [0190.919] CloseHandle (hObject=0xb0) returned 1 [0190.919] AreFileApisANSI () returned 1 [0190.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 142 [0190.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ad68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0190.919] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapigroup\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapigroup\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0190.920] AreFileApisANSI () returned 1 [0190.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0190.992] CloseHandle (hObject=0xa8) returned 1 [0190.993] AreFileApisANSI () returned 1 [0190.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0190.994] CloseHandle (hObject=0xa8) returned 1 [0190.994] AreFileApisANSI () returned 1 [0190.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0190.995] CloseHandle (hObject=0xa8) returned 1 [0190.995] AreFileApisANSI () returned 1 [0190.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0190.997] CloseHandle (hObject=0xac) returned 1 [0190.997] AreFileApisANSI () returned 1 [0190.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0190.999] CloseHandle (hObject=0xac) returned 1 [0191.000] AreFileApisANSI () returned 1 [0191.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0191.001] CloseHandle (hObject=0xac) returned 1 [0191.001] AreFileApisANSI () returned 1 [0191.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 145 [0191.005] CloseHandle (hObject=0xb0) returned 1 [0191.006] AreFileApisANSI () returned 1 [0191.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a55e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 142 [0191.007] CloseHandle (hObject=0xb0) returned 1 [0191.007] AreFileApisANSI () returned 1 [0191.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 145 [0191.008] CloseHandle (hObject=0xb0) returned 1 [0191.009] AreFileApisANSI () returned 1 [0191.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a55e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0191.012] CloseHandle (hObject=0xb0) returned 1 [0191.013] AreFileApisANSI () returned 1 [0191.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0191.014] CloseHandle (hObject=0xb0) returned 1 [0191.014] AreFileApisANSI () returned 1 [0191.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 146 [0191.015] CloseHandle (hObject=0xb0) returned 1 [0191.015] AreFileApisANSI () returned 1 [0191.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0191.016] CloseHandle (hObject=0xac) returned 1 [0191.017] AreFileApisANSI () returned 1 [0191.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 135 [0191.068] CloseHandle (hObject=0xac) returned 1 [0191.068] AreFileApisANSI () returned 1 [0191.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 138 [0191.070] CloseHandle (hObject=0xac) returned 1 [0191.070] AreFileApisANSI () returned 1 [0191.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 147 [0191.073] CloseHandle (hObject=0xb0) returned 1 [0191.073] AreFileApisANSI () returned 1 [0191.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0191.074] CloseHandle (hObject=0xb0) returned 1 [0191.075] AreFileApisANSI () returned 1 [0191.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 147 [0191.076] CloseHandle (hObject=0xb0) returned 1 [0191.077] AreFileApisANSI () returned 1 [0191.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e6a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0191.079] CloseHandle (hObject=0xb4) returned 1 [0191.080] AreFileApisANSI () returned 1 [0191.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 153 [0191.081] CloseHandle (hObject=0xb4) returned 1 [0191.082] AreFileApisANSI () returned 1 [0191.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0191.149] CloseHandle (hObject=0xb4) returned 1 [0191.150] AreFileApisANSI () returned 1 [0191.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0191.152] CloseHandle (hObject=0xb4) returned 1 [0191.152] AreFileApisANSI () returned 1 [0191.152] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 153 [0191.155] CloseHandle (hObject=0xb4) returned 1 [0191.155] AreFileApisANSI () returned 1 [0191.155] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eda0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0191.157] CloseHandle (hObject=0xb4) returned 1 [0191.158] AreFileApisANSI () returned 1 [0191.158] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f200, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0191.160] CloseHandle (hObject=0xb4) returned 1 [0191.161] AreFileApisANSI () returned 1 [0191.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 153 [0191.162] CloseHandle (hObject=0xb4) returned 1 [0191.162] AreFileApisANSI () returned 1 [0191.162] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ee80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0191.165] CloseHandle (hObject=0xb4) returned 1 [0191.166] AreFileApisANSI () returned 1 [0191.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0191.166] CloseHandle (hObject=0xb4) returned 1 [0191.167] AreFileApisANSI () returned 1 [0191.167] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0191.167] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49b4a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0191.167] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0191.168] AreFileApisANSI () returned 1 [0191.168] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f040, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0191.169] CloseHandle (hObject=0xb4) returned 1 [0191.170] AreFileApisANSI () returned 1 [0191.170] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 153 [0191.172] CloseHandle (hObject=0xb4) returned 1 [0191.172] AreFileApisANSI () returned 1 [0191.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0191.173] CloseHandle (hObject=0xb4) returned 1 [0191.174] AreFileApisANSI () returned 1 [0191.174] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0191.175] CloseHandle (hObject=0xac) returned 1 [0191.176] AreFileApisANSI () returned 1 [0191.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0191.177] CloseHandle (hObject=0xac) returned 1 [0191.177] AreFileApisANSI () returned 1 [0191.177] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0191.224] CloseHandle (hObject=0xac) returned 1 [0191.225] AreFileApisANSI () returned 1 [0191.225] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 139 [0191.226] CloseHandle (hObject=0xb0) returned 1 [0191.227] AreFileApisANSI () returned 1 [0191.227] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0191.230] CloseHandle (hObject=0xb0) returned 1 [0191.230] AreFileApisANSI () returned 1 [0191.230] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 139 [0191.232] CloseHandle (hObject=0xb0) returned 1 [0191.233] AreFileApisANSI () returned 1 [0191.233] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0191.234] CloseHandle (hObject=0xa8) returned 1 [0191.234] AreFileApisANSI () returned 1 [0191.234] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0191.236] CloseHandle (hObject=0xa8) returned 1 [0191.236] AreFileApisANSI () returned 1 [0191.236] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0191.288] CloseHandle (hObject=0xa8) returned 1 [0191.289] AreFileApisANSI () returned 1 [0191.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0191.290] CloseHandle (hObject=0xa4) returned 1 [0191.291] AreFileApisANSI () returned 1 [0191.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0191.292] CloseHandle (hObject=0xa4) returned 1 [0191.292] AreFileApisANSI () returned 1 [0191.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0191.326] CloseHandle (hObject=0xa4) returned 1 [0191.326] AreFileApisANSI () returned 1 [0191.326] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0191.330] CloseHandle (hObject=0xa8) returned 1 [0191.331] AreFileApisANSI () returned 1 [0191.331] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0191.333] CloseHandle (hObject=0xa8) returned 1 [0191.333] AreFileApisANSI () returned 1 [0191.333] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0191.334] CloseHandle (hObject=0xa8) returned 1 [0191.335] AreFileApisANSI () returned 1 [0191.335] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0192.416] CloseHandle (hObject=0xac) returned 1 [0192.417] AreFileApisANSI () returned 1 [0192.417] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0192.417] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a28b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0192.417] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb.cryptoid"), dwFlags=0x2) returned 1 [0192.418] AreFileApisANSI () returned 1 [0192.418] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0192.420] CloseHandle (hObject=0xa4) returned 1 [0192.420] AreFileApisANSI () returned 1 [0192.420] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49be28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0192.421] CloseHandle (hObject=0xa4) returned 1 [0192.422] AreFileApisANSI () returned 1 [0192.422] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0192.433] CloseHandle (hObject=0xa4) returned 1 [0192.434] AreFileApisANSI () returned 1 [0192.434] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0192.435] CloseHandle (hObject=0xa4) returned 1 [0192.435] AreFileApisANSI () returned 1 [0192.435] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0192.436] CloseHandle (hObject=0xa4) returned 1 [0192.437] AreFileApisANSI () returned 1 [0192.437] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0192.438] CloseHandle (hObject=0xa4) returned 1 [0192.439] AreFileApisANSI () returned 1 [0192.439] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a36f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 173 [0192.441] CloseHandle (hObject=0xa4) returned 1 [0192.442] AreFileApisANSI () returned 1 [0192.442] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3eb8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 170 [0192.443] CloseHandle (hObject=0xa4) returned 1 [0192.443] AreFileApisANSI () returned 1 [0192.443] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3eb8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 173 [0192.445] CloseHandle (hObject=0xa4) returned 1 [0192.445] AreFileApisANSI () returned 1 [0192.445] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2330, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 189 [0192.446] CloseHandle (hObject=0xa8) returned 1 [0192.447] AreFileApisANSI () returned 1 [0192.447] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 186 [0192.448] CloseHandle (hObject=0xa8) returned 1 [0192.448] AreFileApisANSI () returned 1 [0192.449] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1a70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 189 [0192.450] CloseHandle (hObject=0xa8) returned 1 [0192.450] AreFileApisANSI () returned 1 [0192.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 188 [0192.451] AreFileApisANSI () returned 1 [0192.451] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0192.452] CloseHandle (hObject=0xa4) returned 1 [0192.453] AreFileApisANSI () returned 1 [0192.453] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0192.454] CloseHandle (hObject=0xa4) returned 1 [0192.454] AreFileApisANSI () returned 1 [0192.454] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0192.505] CloseHandle (hObject=0xa4) returned 1 [0192.506] AreFileApisANSI () returned 1 [0192.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0192.507] CloseHandle (hObject=0xa4) returned 1 [0192.507] AreFileApisANSI () returned 1 [0192.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0192.509] CloseHandle (hObject=0xa4) returned 1 [0192.509] AreFileApisANSI () returned 1 [0192.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0192.510] CloseHandle (hObject=0xa4) returned 1 [0192.510] AreFileApisANSI () returned 1 [0192.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0192.511] AreFileApisANSI () returned 1 [0192.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0192.512] CloseHandle (hObject=0xa4) returned 1 [0192.512] AreFileApisANSI () returned 1 [0192.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0192.514] CloseHandle (hObject=0xa4) returned 1 [0192.514] AreFileApisANSI () returned 1 [0192.514] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0192.658] CloseHandle (hObject=0xa4) returned 1 [0192.659] AreFileApisANSI () returned 1 [0192.659] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0192.663] CloseHandle (hObject=0xa4) returned 1 [0192.664] AreFileApisANSI () returned 1 [0192.664] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0192.665] CloseHandle (hObject=0xa4) returned 1 [0192.666] AreFileApisANSI () returned 1 [0192.666] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0192.668] CloseHandle (hObject=0xa4) returned 1 [0192.669] AreFileApisANSI () returned 1 [0192.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0192.673] GetFileType (hFile=0xa0) returned 0x1 [0192.674] CloseHandle (hObject=0xa0) returned 1 [0192.674] AreFileApisANSI () returned 1 [0192.674] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0192.675] CloseHandle (hObject=0xa0) returned 1 [0192.677] AreFileApisANSI () returned 1 [0192.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0192.678] CloseHandle (hObject=0xa0) returned 1 [0192.678] AreFileApisANSI () returned 1 [0192.678] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0192.738] CloseHandle (hObject=0xa4) returned 1 [0192.739] AreFileApisANSI () returned 1 [0192.739] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0192.740] CloseHandle (hObject=0xa4) returned 1 [0192.740] AreFileApisANSI () returned 1 [0192.740] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0192.742] CloseHandle (hObject=0xa4) returned 1 [0192.742] AreFileApisANSI () returned 1 [0192.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0192.744] CloseHandle (hObject=0xa8) returned 1 [0192.744] AreFileApisANSI () returned 1 [0192.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0192.745] CloseHandle (hObject=0xa8) returned 1 [0192.746] AreFileApisANSI () returned 1 [0192.746] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0192.817] CloseHandle (hObject=0xa8) returned 1 [0192.818] AreFileApisANSI () returned 1 [0192.818] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0192.819] CloseHandle (hObject=0xa8) returned 1 [0192.820] AreFileApisANSI () returned 1 [0192.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0192.821] CloseHandle (hObject=0xa8) returned 1 [0192.821] AreFileApisANSI () returned 1 [0192.821] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0192.823] CloseHandle (hObject=0xa8) returned 1 [0192.824] AreFileApisANSI () returned 1 [0192.824] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0192.825] CloseHandle (hObject=0xa8) returned 1 [0192.825] AreFileApisANSI () returned 1 [0192.825] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0192.826] CloseHandle (hObject=0xa8) returned 1 [0192.827] AreFileApisANSI () returned 1 [0192.827] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0192.829] CloseHandle (hObject=0xa8) returned 1 [0192.830] AreFileApisANSI () returned 1 [0192.830] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0192.831] CloseHandle (hObject=0xa8) returned 1 [0192.831] AreFileApisANSI () returned 1 [0192.831] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0192.833] CloseHandle (hObject=0xa8) returned 1 [0192.833] AreFileApisANSI () returned 1 [0192.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0192.902] CloseHandle (hObject=0xa8) returned 1 [0192.903] AreFileApisANSI () returned 1 [0192.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0192.904] CloseHandle (hObject=0xa4) returned 1 [0192.904] AreFileApisANSI () returned 1 [0192.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0192.905] CloseHandle (hObject=0xa4) returned 1 [0192.906] AreFileApisANSI () returned 1 [0192.906] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0193.280] CloseHandle (hObject=0xa4) returned 1 [0193.281] AreFileApisANSI () returned 1 [0193.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0193.282] CloseHandle (hObject=0xa4) returned 1 [0193.283] AreFileApisANSI () returned 1 [0193.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0193.284] CloseHandle (hObject=0xa4) returned 1 [0193.284] AreFileApisANSI () returned 1 [0193.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0193.286] CloseHandle (hObject=0xa4) returned 1 [0193.287] AreFileApisANSI () returned 1 [0193.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0193.288] CloseHandle (hObject=0xa4) returned 1 [0193.288] AreFileApisANSI () returned 1 [0193.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0193.290] CloseHandle (hObject=0xa4) returned 1 [0193.290] AreFileApisANSI () returned 1 [0193.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0193.292] CloseHandle (hObject=0xa4) returned 1 [0193.293] AreFileApisANSI () returned 1 [0193.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496e50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 200 [0193.296] CloseHandle (hObject=0xa4) returned 1 [0193.296] AreFileApisANSI () returned 1 [0193.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496ad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 197 [0193.298] CloseHandle (hObject=0xa4) returned 1 [0193.298] AreFileApisANSI () returned 1 [0193.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4963e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 200 [0193.299] CloseHandle (hObject=0xa4) returned 1 [0193.300] AreFileApisANSI () returned 1 [0193.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a51e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 216 [0193.364] CloseHandle (hObject=0xa8) returned 1 [0193.365] AreFileApisANSI () returned 1 [0193.365] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a4f50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 213 [0193.366] CloseHandle (hObject=0xa8) returned 1 [0193.367] AreFileApisANSI () returned 1 [0193.367] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a4cc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 216 [0193.368] CloseHandle (hObject=0xa8) returned 1 [0193.368] AreFileApisANSI () returned 1 [0193.368] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 215 [0193.389] CloseHandle (hObject=0xac) returned 1 [0193.390] AreFileApisANSI () returned 1 [0193.390] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 215 [0193.390] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499b80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 224 [0193.390] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0193.392] AreFileApisANSI () returned 1 [0193.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0193.393] CloseHandle (hObject=0xa4) returned 1 [0193.393] AreFileApisANSI () returned 1 [0193.393] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0193.395] CloseHandle (hObject=0xa4) returned 1 [0193.396] AreFileApisANSI () returned 1 [0193.396] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0193.398] CloseHandle (hObject=0xa4) returned 1 [0193.399] AreFileApisANSI () returned 1 [0193.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0193.403] GetFileType (hFile=0xa4) returned 0x1 [0193.404] CloseHandle (hObject=0xa4) returned 1 [0193.404] AreFileApisANSI () returned 1 [0193.404] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0193.406] CloseHandle (hObject=0xa4) returned 1 [0193.406] AreFileApisANSI () returned 1 [0193.406] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0193.408] CloseHandle (hObject=0xa4) returned 1 [0193.408] AreFileApisANSI () returned 1 [0193.408] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0193.464] CloseHandle (hObject=0xa8) returned 1 [0193.472] AreFileApisANSI () returned 1 [0193.473] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0193.473] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a28b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0193.473] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0193.474] AreFileApisANSI () returned 1 [0193.474] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0193.476] CloseHandle (hObject=0xa4) returned 1 [0193.476] AreFileApisANSI () returned 1 [0193.476] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0193.477] CloseHandle (hObject=0xa4) returned 1 [0193.478] AreFileApisANSI () returned 1 [0193.478] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0193.527] CloseHandle (hObject=0xa4) returned 1 [0193.528] AreFileApisANSI () returned 1 [0193.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0193.529] CloseHandle (hObject=0xa4) returned 1 [0193.530] AreFileApisANSI () returned 1 [0193.530] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0193.531] CloseHandle (hObject=0xa4) returned 1 [0193.531] AreFileApisANSI () returned 1 [0193.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0193.533] CloseHandle (hObject=0xa4) returned 1 [0193.534] AreFileApisANSI () returned 1 [0193.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0193.537] GetFileType (hFile=0xa0) returned 0x1 [0193.538] CloseHandle (hObject=0xa0) returned 1 [0193.539] AreFileApisANSI () returned 1 [0193.539] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0193.540] CloseHandle (hObject=0xa0) returned 1 [0193.540] AreFileApisANSI () returned 1 [0193.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0193.541] CloseHandle (hObject=0xa0) returned 1 [0193.542] AreFileApisANSI () returned 1 [0193.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0193.631] CloseHandle (hObject=0xa4) returned 1 [0193.631] AreFileApisANSI () returned 1 [0193.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0193.632] CloseHandle (hObject=0xa4) returned 1 [0193.633] AreFileApisANSI () returned 1 [0193.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0193.634] CloseHandle (hObject=0xa4) returned 1 [0193.634] AreFileApisANSI () returned 1 [0193.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0193.635] CloseHandle (hObject=0xa8) returned 1 [0193.636] AreFileApisANSI () returned 1 [0193.636] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0193.637] CloseHandle (hObject=0xa8) returned 1 [0193.637] AreFileApisANSI () returned 1 [0193.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0193.725] CloseHandle (hObject=0xa8) returned 1 [0193.726] AreFileApisANSI () returned 1 [0193.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0193.727] CloseHandle (hObject=0xa8) returned 1 [0193.727] AreFileApisANSI () returned 1 [0193.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0193.728] CloseHandle (hObject=0xa8) returned 1 [0193.728] AreFileApisANSI () returned 1 [0193.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0193.827] CloseHandle (hObject=0xa8) returned 1 [0193.828] AreFileApisANSI () returned 1 [0193.828] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0193.828] CloseHandle (hObject=0xa8) returned 1 [0193.829] AreFileApisANSI () returned 1 [0193.829] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0193.830] CloseHandle (hObject=0xa8) returned 1 [0193.830] AreFileApisANSI () returned 1 [0193.830] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0193.928] CloseHandle (hObject=0xa8) returned 1 [0193.928] AreFileApisANSI () returned 1 [0193.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0193.930] CloseHandle (hObject=0xa8) returned 1 [0193.931] AreFileApisANSI () returned 1 [0193.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0193.932] CloseHandle (hObject=0xa8) returned 1 [0193.932] AreFileApisANSI () returned 1 [0193.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0193.934] CloseHandle (hObject=0xa8) returned 1 [0193.935] AreFileApisANSI () returned 1 [0193.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0193.936] CloseHandle (hObject=0xa4) returned 1 [0193.936] AreFileApisANSI () returned 1 [0193.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0193.937] CloseHandle (hObject=0xa4) returned 1 [0193.938] AreFileApisANSI () returned 1 [0193.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0193.939] CloseHandle (hObject=0xa4) returned 1 [0193.940] AreFileApisANSI () returned 1 [0193.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0193.941] CloseHandle (hObject=0xa4) returned 1 [0193.942] AreFileApisANSI () returned 1 [0193.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0193.943] CloseHandle (hObject=0xa4) returned 1 [0193.943] AreFileApisANSI () returned 1 [0193.943] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0194.027] CloseHandle (hObject=0xa4) returned 1 [0194.028] AreFileApisANSI () returned 1 [0194.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0194.126] CloseHandle (hObject=0xa4) returned 1 [0194.127] AreFileApisANSI () returned 1 [0194.127] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0194.128] CloseHandle (hObject=0xa4) returned 1 [0194.128] AreFileApisANSI () returned 1 [0194.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0194.130] CloseHandle (hObject=0xa4) returned 1 [0194.130] AreFileApisANSI () returned 1 [0194.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3bd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 165 [0194.132] CloseHandle (hObject=0xa4) returned 1 [0194.132] AreFileApisANSI () returned 1 [0194.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3eb8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 162 [0194.174] CloseHandle (hObject=0xa4) returned 1 [0194.175] AreFileApisANSI () returned 1 [0194.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3ad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 165 [0194.176] CloseHandle (hObject=0xa4) returned 1 [0194.176] AreFileApisANSI () returned 1 [0194.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1ed0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 181 [0194.179] GetFileType (hFile=0xa8) returned 0x1 [0194.179] CloseHandle (hObject=0xa8) returned 1 [0194.180] AreFileApisANSI () returned 1 [0194.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 178 [0194.181] CloseHandle (hObject=0xa8) returned 1 [0194.181] AreFileApisANSI () returned 1 [0194.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 181 [0194.182] CloseHandle (hObject=0xa8) returned 1 [0194.182] AreFileApisANSI () returned 1 [0194.182] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 180 [0194.670] CloseHandle (hObject=0xac) returned 1 [0194.670] AreFileApisANSI () returned 1 [0194.670] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 180 [0194.670] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 189 [0194.671] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0194.672] AreFileApisANSI () returned 1 [0194.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0194.673] CloseHandle (hObject=0xa4) returned 1 [0194.673] AreFileApisANSI () returned 1 [0194.673] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0194.674] CloseHandle (hObject=0xa4) returned 1 [0194.674] AreFileApisANSI () returned 1 [0194.674] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0194.708] CloseHandle (hObject=0xa4) returned 1 [0194.709] AreFileApisANSI () returned 1 [0194.709] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0194.723] GetFileType (hFile=0xa4) returned 0x1 [0194.724] CloseHandle (hObject=0xa4) returned 1 [0194.724] AreFileApisANSI () returned 1 [0194.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0194.725] CloseHandle (hObject=0xa4) returned 1 [0194.726] AreFileApisANSI () returned 1 [0194.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0194.727] CloseHandle (hObject=0xa4) returned 1 [0194.727] AreFileApisANSI () returned 1 [0194.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0194.737] CloseHandle (hObject=0xa8) returned 1 [0194.737] AreFileApisANSI () returned 1 [0194.737] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0194.737] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2e90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0194.737] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0194.738] AreFileApisANSI () returned 1 [0194.738] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0194.739] CloseHandle (hObject=0xa4) returned 1 [0194.740] AreFileApisANSI () returned 1 [0194.740] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0194.740] CloseHandle (hObject=0xa4) returned 1 [0194.741] AreFileApisANSI () returned 1 [0194.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0194.743] CloseHandle (hObject=0xa4) returned 1 [0194.743] AreFileApisANSI () returned 1 [0194.743] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0194.744] GetFileType (hFile=0xa4) returned 0x1 [0194.744] CloseHandle (hObject=0xa4) returned 1 [0194.744] AreFileApisANSI () returned 1 [0194.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0194.746] CloseHandle (hObject=0xa4) returned 1 [0194.746] AreFileApisANSI () returned 1 [0194.746] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0194.747] CloseHandle (hObject=0xa4) returned 1 [0194.747] AreFileApisANSI () returned 1 [0194.747] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0194.748] CloseHandle (hObject=0xa0) returned 1 [0194.748] AreFileApisANSI () returned 1 [0194.748] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0194.749] CloseHandle (hObject=0xa0) returned 1 [0194.749] AreFileApisANSI () returned 1 [0194.749] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0194.750] CloseHandle (hObject=0xa0) returned 1 [0194.750] AreFileApisANSI () returned 1 [0194.750] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0194.751] GetFileType (hFile=0xa4) returned 0x1 [0194.751] CloseHandle (hObject=0xa4) returned 1 [0194.752] AreFileApisANSI () returned 1 [0194.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0194.752] CloseHandle (hObject=0xa4) returned 1 [0194.753] AreFileApisANSI () returned 1 [0194.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0194.754] CloseHandle (hObject=0xa4) returned 1 [0194.754] AreFileApisANSI () returned 1 [0194.754] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0194.756] CloseHandle (hObject=0xa8) returned 1 [0194.756] AreFileApisANSI () returned 1 [0194.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0194.757] CloseHandle (hObject=0xa8) returned 1 [0194.757] AreFileApisANSI () returned 1 [0194.757] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0194.805] CloseHandle (hObject=0xa8) returned 1 [0194.805] AreFileApisANSI () returned 1 [0194.805] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0194.806] CloseHandle (hObject=0xa8) returned 1 [0194.806] AreFileApisANSI () returned 1 [0194.807] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0194.807] CloseHandle (hObject=0xa8) returned 1 [0194.808] AreFileApisANSI () returned 1 [0194.808] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0194.810] CloseHandle (hObject=0xa8) returned 1 [0194.810] AreFileApisANSI () returned 1 [0194.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0194.811] CloseHandle (hObject=0xa8) returned 1 [0194.811] AreFileApisANSI () returned 1 [0194.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0194.812] CloseHandle (hObject=0xa8) returned 1 [0194.812] AreFileApisANSI () returned 1 [0194.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0194.880] CloseHandle (hObject=0xa8) returned 1 [0194.880] AreFileApisANSI () returned 1 [0194.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0194.881] GetFileType (hFile=0xa8) returned 0x1 [0194.881] CloseHandle (hObject=0xa8) returned 1 [0194.881] AreFileApisANSI () returned 1 [0194.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0194.883] CloseHandle (hObject=0xa8) returned 1 [0194.884] AreFileApisANSI () returned 1 [0194.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0194.884] CloseHandle (hObject=0xa8) returned 1 [0194.885] AreFileApisANSI () returned 1 [0194.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5838, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0194.885] GetFileType (hFile=0xac) returned 0x1 [0194.886] CloseHandle (hObject=0xac) returned 1 [0194.886] AreFileApisANSI () returned 1 [0194.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0194.887] CloseHandle (hObject=0xac) returned 1 [0194.887] AreFileApisANSI () returned 1 [0194.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0194.888] CloseHandle (hObject=0xac) returned 1 [0194.888] AreFileApisANSI () returned 1 [0194.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e6a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0194.889] CloseHandle (hObject=0xb0) returned 1 [0194.889] AreFileApisANSI () returned 1 [0194.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ecc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0194.922] CloseHandle (hObject=0xb0) returned 1 [0194.923] AreFileApisANSI () returned 1 [0194.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0194.924] CloseHandle (hObject=0xb0) returned 1 [0194.924] AreFileApisANSI () returned 1 [0194.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0194.926] CloseHandle (hObject=0xb0) returned 1 [0194.926] AreFileApisANSI () returned 1 [0194.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0194.977] CloseHandle (hObject=0xb0) returned 1 [0194.978] AreFileApisANSI () returned 1 [0194.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ecc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0194.978] CloseHandle (hObject=0xb0) returned 1 [0194.979] AreFileApisANSI () returned 1 [0194.979] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0194.980] CloseHandle (hObject=0xb0) returned 1 [0194.980] AreFileApisANSI () returned 1 [0194.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e6a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0194.982] CloseHandle (hObject=0xb0) returned 1 [0194.982] AreFileApisANSI () returned 1 [0194.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ecc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0194.983] CloseHandle (hObject=0xb0) returned 1 [0194.984] AreFileApisANSI () returned 1 [0194.984] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0194.984] CloseHandle (hObject=0xb0) returned 1 [0194.985] AreFileApisANSI () returned 1 [0194.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eda0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0194.986] CloseHandle (hObject=0xb0) returned 1 [0194.987] AreFileApisANSI () returned 1 [0194.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ecc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0194.987] CloseHandle (hObject=0xb0) returned 1 [0194.988] AreFileApisANSI () returned 1 [0194.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0194.989] CloseHandle (hObject=0xb0) returned 1 [0194.989] AreFileApisANSI () returned 1 [0194.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0195.031] CloseHandle (hObject=0xb0) returned 1 [0195.031] AreFileApisANSI () returned 1 [0195.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eda0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 151 [0195.032] CloseHandle (hObject=0xb0) returned 1 [0195.033] AreFileApisANSI () returned 1 [0195.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0195.033] CloseHandle (hObject=0xa8) returned 1 [0195.034] AreFileApisANSI () returned 1 [0195.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0195.035] CloseHandle (hObject=0xa8) returned 1 [0195.036] AreFileApisANSI () returned 1 [0195.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0195.144] CloseHandle (hObject=0xa8) returned 1 [0195.144] AreFileApisANSI () returned 1 [0195.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0195.146] CloseHandle (hObject=0xa4) returned 1 [0195.146] AreFileApisANSI () returned 1 [0195.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0195.147] CloseHandle (hObject=0xa4) returned 1 [0195.147] AreFileApisANSI () returned 1 [0195.147] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0195.149] CloseHandle (hObject=0xa4) returned 1 [0195.150] AreFileApisANSI () returned 1 [0195.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0195.151] CloseHandle (hObject=0xa4) returned 1 [0195.151] AreFileApisANSI () returned 1 [0195.151] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0195.152] CloseHandle (hObject=0xa4) returned 1 [0195.152] AreFileApisANSI () returned 1 [0195.152] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0195.154] CloseHandle (hObject=0xa4) returned 1 [0195.154] AreFileApisANSI () returned 1 [0195.154] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0195.155] CloseHandle (hObject=0xa4) returned 1 [0195.156] AreFileApisANSI () returned 1 [0195.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0195.156] CloseHandle (hObject=0xa4) returned 1 [0195.157] AreFileApisANSI () returned 1 [0195.157] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0195.158] CloseHandle (hObject=0xa4) returned 1 [0195.159] AreFileApisANSI () returned 1 [0195.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496ad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 204 [0195.161] CloseHandle (hObject=0xa4) returned 1 [0195.161] AreFileApisANSI () returned 1 [0195.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496ad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 201 [0195.162] CloseHandle (hObject=0xa4) returned 1 [0195.163] AreFileApisANSI () returned 1 [0195.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496638, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 204 [0195.163] CloseHandle (hObject=0xa4) returned 1 [0195.164] AreFileApisANSI () returned 1 [0195.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a4510, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 220 [0195.165] CloseHandle (hObject=0xa8) returned 1 [0195.165] AreFileApisANSI () returned 1 [0195.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a4b78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 217 [0195.166] CloseHandle (hObject=0xa8) returned 1 [0195.166] AreFileApisANSI () returned 1 [0195.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 220 [0195.497] CloseHandle (hObject=0xa8) returned 1 [0195.498] AreFileApisANSI () returned 1 [0195.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 219 [0195.498] AreFileApisANSI () returned 1 [0195.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0195.500] CloseHandle (hObject=0xa4) returned 1 [0195.500] AreFileApisANSI () returned 1 [0195.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0195.502] CloseHandle (hObject=0xa4) returned 1 [0195.502] AreFileApisANSI () returned 1 [0195.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0195.505] CloseHandle (hObject=0xa4) returned 1 [0195.506] AreFileApisANSI () returned 1 [0195.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0195.507] CloseHandle (hObject=0xa4) returned 1 [0195.508] AreFileApisANSI () returned 1 [0195.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49be28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0195.509] CloseHandle (hObject=0xa4) returned 1 [0195.510] AreFileApisANSI () returned 1 [0195.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0195.511] CloseHandle (hObject=0xa4) returned 1 [0195.512] AreFileApisANSI () returned 1 [0195.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0195.512] AreFileApisANSI () returned 1 [0195.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0195.514] CloseHandle (hObject=0xa4) returned 1 [0195.514] AreFileApisANSI () returned 1 [0195.514] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0195.515] CloseHandle (hObject=0xa4) returned 1 [0195.516] AreFileApisANSI () returned 1 [0195.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0195.534] CloseHandle (hObject=0xa4) returned 1 [0195.535] AreFileApisANSI () returned 1 [0195.535] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0195.537] CloseHandle (hObject=0xa4) returned 1 [0195.537] AreFileApisANSI () returned 1 [0195.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0195.539] CloseHandle (hObject=0xa4) returned 1 [0195.539] AreFileApisANSI () returned 1 [0195.539] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0195.540] CloseHandle (hObject=0xa4) returned 1 [0195.540] AreFileApisANSI () returned 1 [0195.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0195.616] CloseHandle (hObject=0xa0) returned 1 [0195.616] AreFileApisANSI () returned 1 [0195.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0195.617] CloseHandle (hObject=0xa0) returned 1 [0195.618] AreFileApisANSI () returned 1 [0195.618] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0195.618] CloseHandle (hObject=0xa0) returned 1 [0195.619] AreFileApisANSI () returned 1 [0195.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0195.693] CloseHandle (hObject=0xa4) returned 1 [0195.693] AreFileApisANSI () returned 1 [0195.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0195.694] CloseHandle (hObject=0xa4) returned 1 [0195.695] AreFileApisANSI () returned 1 [0195.695] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0195.696] CloseHandle (hObject=0xa4) returned 1 [0195.696] AreFileApisANSI () returned 1 [0195.696] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0195.697] CloseHandle (hObject=0xa8) returned 1 [0195.698] AreFileApisANSI () returned 1 [0195.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0195.699] CloseHandle (hObject=0xa8) returned 1 [0195.699] AreFileApisANSI () returned 1 [0195.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0195.788] CloseHandle (hObject=0xa8) returned 1 [0195.789] AreFileApisANSI () returned 1 [0195.789] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0195.790] CloseHandle (hObject=0xa8) returned 1 [0195.791] AreFileApisANSI () returned 1 [0195.791] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0195.792] CloseHandle (hObject=0xa8) returned 1 [0195.792] AreFileApisANSI () returned 1 [0195.792] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0195.794] CloseHandle (hObject=0xa8) returned 1 [0195.795] AreFileApisANSI () returned 1 [0195.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0195.796] CloseHandle (hObject=0xa8) returned 1 [0195.797] AreFileApisANSI () returned 1 [0195.797] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0195.798] CloseHandle (hObject=0xa8) returned 1 [0195.798] AreFileApisANSI () returned 1 [0195.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0195.840] CloseHandle (hObject=0xa8) returned 1 [0195.841] AreFileApisANSI () returned 1 [0195.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0195.842] CloseHandle (hObject=0xa8) returned 1 [0195.842] AreFileApisANSI () returned 1 [0195.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0195.843] CloseHandle (hObject=0xa8) returned 1 [0195.843] AreFileApisANSI () returned 1 [0195.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0195.846] CloseHandle (hObject=0xa8) returned 1 [0195.846] AreFileApisANSI () returned 1 [0195.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0195.848] CloseHandle (hObject=0xa4) returned 1 [0195.848] AreFileApisANSI () returned 1 [0195.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0195.849] CloseHandle (hObject=0xa4) returned 1 [0195.850] AreFileApisANSI () returned 1 [0195.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0195.851] CloseHandle (hObject=0xa4) returned 1 [0195.852] AreFileApisANSI () returned 1 [0195.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0195.853] CloseHandle (hObject=0xa4) returned 1 [0195.853] AreFileApisANSI () returned 1 [0195.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0195.854] CloseHandle (hObject=0xa4) returned 1 [0195.854] AreFileApisANSI () returned 1 [0195.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0195.856] CloseHandle (hObject=0xa4) returned 1 [0195.856] AreFileApisANSI () returned 1 [0195.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0195.857] CloseHandle (hObject=0xa4) returned 1 [0195.858] AreFileApisANSI () returned 1 [0195.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0195.858] CloseHandle (hObject=0xa4) returned 1 [0195.859] AreFileApisANSI () returned 1 [0195.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0195.861] CloseHandle (hObject=0xa4) returned 1 [0195.861] AreFileApisANSI () returned 1 [0195.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0195.863] CloseHandle (hObject=0xa4) returned 1 [0195.863] AreFileApisANSI () returned 1 [0195.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0195.866] CloseHandle (hObject=0xa4) returned 1 [0195.867] AreFileApisANSI () returned 1 [0195.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f040, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0195.868] CloseHandle (hObject=0xa4) returned 1 [0195.868] AreFileApisANSI () returned 1 [0195.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a38e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 180 [0195.871] GetFileType (hFile=0xa8) returned 0x1 [0195.871] CloseHandle (hObject=0xa8) returned 1 [0195.872] AreFileApisANSI () returned 1 [0195.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3ad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 177 [0195.873] CloseHandle (hObject=0xa8) returned 1 [0195.873] AreFileApisANSI () returned 1 [0195.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a38e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 180 [0195.874] CloseHandle (hObject=0xa8) returned 1 [0195.874] AreFileApisANSI () returned 1 [0195.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0196.059] CloseHandle (hObject=0xac) returned 1 [0196.060] AreFileApisANSI () returned 1 [0196.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 179 [0196.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5838, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 188 [0196.060] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0196.061] AreFileApisANSI () returned 1 [0196.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0196.062] CloseHandle (hObject=0xa4) returned 1 [0196.062] AreFileApisANSI () returned 1 [0196.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0196.063] CloseHandle (hObject=0xa4) returned 1 [0196.063] AreFileApisANSI () returned 1 [0196.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49be28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0196.065] CloseHandle (hObject=0xa4) returned 1 [0196.065] AreFileApisANSI () returned 1 [0196.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0196.066] GetFileType (hFile=0xa4) returned 0x1 [0196.066] CloseHandle (hObject=0xa4) returned 1 [0196.067] AreFileApisANSI () returned 1 [0196.067] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0196.069] CloseHandle (hObject=0xa4) returned 1 [0196.069] AreFileApisANSI () returned 1 [0196.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0196.070] CloseHandle (hObject=0xa4) returned 1 [0196.070] AreFileApisANSI () returned 1 [0196.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0196.080] CloseHandle (hObject=0xa8) returned 1 [0196.080] AreFileApisANSI () returned 1 [0196.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0196.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0196.080] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0196.081] AreFileApisANSI () returned 1 [0196.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0196.082] CloseHandle (hObject=0xa4) returned 1 [0196.083] AreFileApisANSI () returned 1 [0196.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0196.084] CloseHandle (hObject=0xa4) returned 1 [0196.084] AreFileApisANSI () returned 1 [0196.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0196.148] CloseHandle (hObject=0xa4) returned 1 [0196.149] AreFileApisANSI () returned 1 [0196.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0196.150] CloseHandle (hObject=0xa4) returned 1 [0196.151] AreFileApisANSI () returned 1 [0196.151] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0196.152] CloseHandle (hObject=0xa4) returned 1 [0196.153] AreFileApisANSI () returned 1 [0196.153] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0196.155] CloseHandle (hObject=0xa4) returned 1 [0196.156] AreFileApisANSI () returned 1 [0196.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0196.257] GetFileType (hFile=0xa0) returned 0x1 [0196.258] CloseHandle (hObject=0xa0) returned 1 [0196.258] AreFileApisANSI () returned 1 [0196.258] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0196.259] CloseHandle (hObject=0xa0) returned 1 [0196.260] AreFileApisANSI () returned 1 [0196.260] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0196.261] CloseHandle (hObject=0xa0) returned 1 [0196.261] AreFileApisANSI () returned 1 [0196.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0196.365] CloseHandle (hObject=0xa4) returned 1 [0196.366] AreFileApisANSI () returned 1 [0196.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0196.367] CloseHandle (hObject=0xa4) returned 1 [0196.367] AreFileApisANSI () returned 1 [0196.367] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0196.368] CloseHandle (hObject=0xa4) returned 1 [0196.369] AreFileApisANSI () returned 1 [0196.369] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0196.370] CloseHandle (hObject=0xa8) returned 1 [0196.371] AreFileApisANSI () returned 1 [0196.371] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0196.372] CloseHandle (hObject=0xa8) returned 1 [0196.372] AreFileApisANSI () returned 1 [0196.373] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0196.480] CloseHandle (hObject=0xa8) returned 1 [0196.481] AreFileApisANSI () returned 1 [0196.481] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0196.482] CloseHandle (hObject=0xa8) returned 1 [0196.483] AreFileApisANSI () returned 1 [0196.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0196.484] CloseHandle (hObject=0xa8) returned 1 [0196.484] AreFileApisANSI () returned 1 [0196.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0196.487] CloseHandle (hObject=0xa8) returned 1 [0196.487] AreFileApisANSI () returned 1 [0196.487] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0196.489] CloseHandle (hObject=0xa8) returned 1 [0196.489] AreFileApisANSI () returned 1 [0196.489] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0196.490] CloseHandle (hObject=0xa8) returned 1 [0196.491] AreFileApisANSI () returned 1 [0196.491] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0196.493] CloseHandle (hObject=0xa8) returned 1 [0196.494] AreFileApisANSI () returned 1 [0196.494] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0196.501] CloseHandle (hObject=0xa8) returned 1 [0196.502] AreFileApisANSI () returned 1 [0196.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0196.503] CloseHandle (hObject=0xa8) returned 1 [0196.503] AreFileApisANSI () returned 1 [0196.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0196.531] CloseHandle (hObject=0xa8) returned 1 [0196.532] AreFileApisANSI () returned 1 [0196.532] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0196.533] CloseHandle (hObject=0xa4) returned 1 [0196.534] AreFileApisANSI () returned 1 [0196.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0196.535] CloseHandle (hObject=0xa4) returned 1 [0196.535] AreFileApisANSI () returned 1 [0196.535] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0196.537] CloseHandle (hObject=0xa4) returned 1 [0196.538] AreFileApisANSI () returned 1 [0196.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0196.540] CloseHandle (hObject=0xa4) returned 1 [0196.540] AreFileApisANSI () returned 1 [0196.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0196.541] CloseHandle (hObject=0xa4) returned 1 [0196.542] AreFileApisANSI () returned 1 [0196.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0196.544] CloseHandle (hObject=0xa4) returned 1 [0196.545] AreFileApisANSI () returned 1 [0196.545] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0196.546] CloseHandle (hObject=0xa4) returned 1 [0196.546] AreFileApisANSI () returned 1 [0196.546] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0196.547] CloseHandle (hObject=0xa4) returned 1 [0196.547] AreFileApisANSI () returned 1 [0196.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0196.549] CloseHandle (hObject=0xa4) returned 1 [0196.550] AreFileApisANSI () returned 1 [0196.550] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3dc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 172 [0196.552] CloseHandle (hObject=0xa4) returned 1 [0196.552] AreFileApisANSI () returned 1 [0196.552] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a41a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0196.553] CloseHandle (hObject=0xa4) returned 1 [0196.554] AreFileApisANSI () returned 1 [0196.554] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3fb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 172 [0196.555] CloseHandle (hObject=0xa4) returned 1 [0196.555] AreFileApisANSI () returned 1 [0196.555] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1ca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 188 [0196.596] GetFileType (hFile=0xa8) returned 0x1 [0196.597] CloseHandle (hObject=0xa8) returned 1 [0196.598] AreFileApisANSI () returned 1 [0196.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 185 [0196.599] CloseHandle (hObject=0xa8) returned 1 [0196.599] AreFileApisANSI () returned 1 [0196.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2100, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 188 [0196.600] CloseHandle (hObject=0xa8) returned 1 [0196.601] AreFileApisANSI () returned 1 [0196.601] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 187 [0196.628] CloseHandle (hObject=0xac) returned 1 [0196.628] AreFileApisANSI () returned 1 [0196.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 187 [0196.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a6668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 196 [0196.628] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0196.630] AreFileApisANSI () returned 1 [0196.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0196.631] CloseHandle (hObject=0xa4) returned 1 [0196.631] AreFileApisANSI () returned 1 [0196.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0196.632] CloseHandle (hObject=0xa4) returned 1 [0196.633] AreFileApisANSI () returned 1 [0196.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0196.642] CloseHandle (hObject=0xa4) returned 1 [0196.643] AreFileApisANSI () returned 1 [0196.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0196.644] GetFileType (hFile=0xa4) returned 0x1 [0196.644] CloseHandle (hObject=0xa4) returned 1 [0196.645] AreFileApisANSI () returned 1 [0196.645] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0196.647] CloseHandle (hObject=0xa4) returned 1 [0196.648] AreFileApisANSI () returned 1 [0196.648] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0196.649] CloseHandle (hObject=0xa4) returned 1 [0196.650] AreFileApisANSI () returned 1 [0196.650] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0196.662] CloseHandle (hObject=0xa8) returned 1 [0196.662] AreFileApisANSI () returned 1 [0196.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0196.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0196.662] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0196.664] AreFileApisANSI () returned 1 [0196.664] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0196.665] CloseHandle (hObject=0xa4) returned 1 [0196.665] AreFileApisANSI () returned 1 [0196.665] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0196.666] CloseHandle (hObject=0xa4) returned 1 [0196.667] AreFileApisANSI () returned 1 [0196.667] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0196.676] CloseHandle (hObject=0xa4) returned 1 [0196.677] AreFileApisANSI () returned 1 [0196.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0196.678] CloseHandle (hObject=0xa4) returned 1 [0196.678] AreFileApisANSI () returned 1 [0196.678] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0196.679] CloseHandle (hObject=0xa4) returned 1 [0196.680] AreFileApisANSI () returned 1 [0196.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0196.682] CloseHandle (hObject=0xa4) returned 1 [0196.683] AreFileApisANSI () returned 1 [0196.683] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0196.686] GetFileType (hFile=0xa0) returned 0x1 [0196.687] CloseHandle (hObject=0xa0) returned 1 [0196.688] AreFileApisANSI () returned 1 [0196.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0196.689] CloseHandle (hObject=0xa0) returned 1 [0196.690] AreFileApisANSI () returned 1 [0196.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0196.691] CloseHandle (hObject=0xa0) returned 1 [0196.692] AreFileApisANSI () returned 1 [0196.692] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0196.696] CloseHandle (hObject=0xa4) returned 1 [0196.696] AreFileApisANSI () returned 1 [0196.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0196.698] CloseHandle (hObject=0xa4) returned 1 [0196.698] AreFileApisANSI () returned 1 [0196.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0196.699] CloseHandle (hObject=0xa4) returned 1 [0196.700] AreFileApisANSI () returned 1 [0196.700] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0196.702] CloseHandle (hObject=0xa8) returned 1 [0196.703] AreFileApisANSI () returned 1 [0196.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0196.704] CloseHandle (hObject=0xa8) returned 1 [0196.705] AreFileApisANSI () returned 1 [0196.705] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0196.712] CloseHandle (hObject=0xa8) returned 1 [0196.712] AreFileApisANSI () returned 1 [0196.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0196.714] CloseHandle (hObject=0xa8) returned 1 [0196.714] AreFileApisANSI () returned 1 [0196.714] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0196.715] CloseHandle (hObject=0xa8) returned 1 [0196.716] AreFileApisANSI () returned 1 [0196.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0196.719] CloseHandle (hObject=0xa8) returned 1 [0196.720] AreFileApisANSI () returned 1 [0196.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0196.721] CloseHandle (hObject=0xa8) returned 1 [0196.721] AreFileApisANSI () returned 1 [0196.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0196.722] CloseHandle (hObject=0xa8) returned 1 [0196.724] AreFileApisANSI () returned 1 [0196.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0196.727] CloseHandle (hObject=0xa8) returned 1 [0196.727] AreFileApisANSI () returned 1 [0196.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0196.728] CloseHandle (hObject=0xa8) returned 1 [0196.729] AreFileApisANSI () returned 1 [0196.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0196.730] CloseHandle (hObject=0xa8) returned 1 [0196.730] AreFileApisANSI () returned 1 [0196.730] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0196.733] CloseHandle (hObject=0xa8) returned 1 [0196.734] AreFileApisANSI () returned 1 [0196.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0196.735] CloseHandle (hObject=0xa4) returned 1 [0196.736] AreFileApisANSI () returned 1 [0196.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0196.737] CloseHandle (hObject=0xa4) returned 1 [0196.737] AreFileApisANSI () returned 1 [0196.737] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0196.747] CloseHandle (hObject=0xa4) returned 1 [0196.748] AreFileApisANSI () returned 1 [0196.748] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0196.750] CloseHandle (hObject=0xa4) returned 1 [0196.751] AreFileApisANSI () returned 1 [0196.751] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0196.752] CloseHandle (hObject=0xa4) returned 1 [0196.752] AreFileApisANSI () returned 1 [0196.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0196.755] CloseHandle (hObject=0xa4) returned 1 [0196.755] AreFileApisANSI () returned 1 [0196.755] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0196.756] CloseHandle (hObject=0xa4) returned 1 [0196.757] AreFileApisANSI () returned 1 [0196.757] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0196.758] CloseHandle (hObject=0xa4) returned 1 [0196.759] AreFileApisANSI () returned 1 [0196.759] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0196.761] CloseHandle (hObject=0xa4) returned 1 [0196.762] AreFileApisANSI () returned 1 [0196.762] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 160 [0196.764] CloseHandle (hObject=0xa4) returned 1 [0196.765] AreFileApisANSI () returned 1 [0196.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 157 [0196.779] CloseHandle (hObject=0xa4) returned 1 [0196.780] AreFileApisANSI () returned 1 [0196.780] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eda0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 160 [0196.781] CloseHandle (hObject=0xa4) returned 1 [0196.781] AreFileApisANSI () returned 1 [0196.782] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a38e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 176 [0196.785] GetFileType (hFile=0xa8) returned 0x1 [0196.786] CloseHandle (hObject=0xa8) returned 1 [0196.786] AreFileApisANSI () returned 1 [0196.786] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a4390, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 173 [0196.787] CloseHandle (hObject=0xa8) returned 1 [0196.788] AreFileApisANSI () returned 1 [0196.788] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a38e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 176 [0196.789] CloseHandle (hObject=0xa8) returned 1 [0196.789] AreFileApisANSI () returned 1 [0196.789] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0196.821] CloseHandle (hObject=0xac) returned 1 [0196.822] AreFileApisANSI () returned 1 [0196.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0196.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a55e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 184 [0196.822] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0196.823] AreFileApisANSI () returned 1 [0196.823] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0196.824] CloseHandle (hObject=0xa4) returned 1 [0196.825] AreFileApisANSI () returned 1 [0196.825] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0196.826] CloseHandle (hObject=0xa4) returned 1 [0196.827] AreFileApisANSI () returned 1 [0196.827] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0196.829] CloseHandle (hObject=0xa4) returned 1 [0196.830] AreFileApisANSI () returned 1 [0196.830] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0196.830] GetFileType (hFile=0xa4) returned 0x1 [0196.831] CloseHandle (hObject=0xa4) returned 1 [0196.831] AreFileApisANSI () returned 1 [0196.831] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0196.834] CloseHandle (hObject=0xa4) returned 1 [0196.834] AreFileApisANSI () returned 1 [0196.834] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0196.835] CloseHandle (hObject=0xa4) returned 1 [0196.836] AreFileApisANSI () returned 1 [0196.836] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0196.847] CloseHandle (hObject=0xa8) returned 1 [0196.848] AreFileApisANSI () returned 1 [0196.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0196.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2b60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0196.848] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0196.849] AreFileApisANSI () returned 1 [0196.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0196.850] CloseHandle (hObject=0xa4) returned 1 [0196.851] AreFileApisANSI () returned 1 [0196.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0196.852] CloseHandle (hObject=0xa4) returned 1 [0196.852] AreFileApisANSI () returned 1 [0196.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0196.854] CloseHandle (hObject=0xa4) returned 1 [0196.855] AreFileApisANSI () returned 1 [0196.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0196.856] CloseHandle (hObject=0xa4) returned 1 [0196.857] AreFileApisANSI () returned 1 [0196.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0196.858] CloseHandle (hObject=0xa4) returned 1 [0196.858] AreFileApisANSI () returned 1 [0196.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0196.875] CloseHandle (hObject=0xa4) returned 1 [0196.876] AreFileApisANSI () returned 1 [0196.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0196.888] GetFileType (hFile=0xa0) returned 0x1 [0196.889] CloseHandle (hObject=0xa0) returned 1 [0196.890] AreFileApisANSI () returned 1 [0196.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0196.891] CloseHandle (hObject=0xa0) returned 1 [0196.891] AreFileApisANSI () returned 1 [0196.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0196.892] CloseHandle (hObject=0xa0) returned 1 [0196.892] AreFileApisANSI () returned 1 [0196.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0196.897] CloseHandle (hObject=0xa4) returned 1 [0196.898] AreFileApisANSI () returned 1 [0196.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0196.899] CloseHandle (hObject=0xa4) returned 1 [0196.900] AreFileApisANSI () returned 1 [0196.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0196.901] CloseHandle (hObject=0xa4) returned 1 [0196.901] AreFileApisANSI () returned 1 [0196.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0196.903] CloseHandle (hObject=0xa8) returned 1 [0196.904] AreFileApisANSI () returned 1 [0196.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0196.905] CloseHandle (hObject=0xa8) returned 1 [0196.905] AreFileApisANSI () returned 1 [0196.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0196.907] CloseHandle (hObject=0xa8) returned 1 [0196.908] AreFileApisANSI () returned 1 [0196.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0196.909] CloseHandle (hObject=0xa8) returned 1 [0196.910] AreFileApisANSI () returned 1 [0196.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0196.911] CloseHandle (hObject=0xa8) returned 1 [0196.911] AreFileApisANSI () returned 1 [0196.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0196.921] CloseHandle (hObject=0xa8) returned 1 [0196.923] AreFileApisANSI () returned 1 [0196.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0196.924] CloseHandle (hObject=0xa8) returned 1 [0196.925] AreFileApisANSI () returned 1 [0196.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0196.926] CloseHandle (hObject=0xa8) returned 1 [0196.926] AreFileApisANSI () returned 1 [0196.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 132 [0196.929] CloseHandle (hObject=0xa8) returned 1 [0196.929] AreFileApisANSI () returned 1 [0196.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0196.931] CloseHandle (hObject=0xa8) returned 1 [0196.932] AreFileApisANSI () returned 1 [0196.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0196.933] CloseHandle (hObject=0xa8) returned 1 [0196.933] AreFileApisANSI () returned 1 [0196.933] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0196.936] CloseHandle (hObject=0xa8) returned 1 [0196.936] AreFileApisANSI () returned 1 [0196.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0196.938] CloseHandle (hObject=0xa4) returned 1 [0196.939] AreFileApisANSI () returned 1 [0196.939] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0196.940] CloseHandle (hObject=0xa4) returned 1 [0196.940] AreFileApisANSI () returned 1 [0196.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0196.942] CloseHandle (hObject=0xa4) returned 1 [0196.943] AreFileApisANSI () returned 1 [0196.943] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0196.944] CloseHandle (hObject=0xa4) returned 1 [0196.944] AreFileApisANSI () returned 1 [0196.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0196.946] CloseHandle (hObject=0xa4) returned 1 [0196.946] AreFileApisANSI () returned 1 [0196.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0196.954] CloseHandle (hObject=0xa4) returned 1 [0196.954] AreFileApisANSI () returned 1 [0196.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0196.955] CloseHandle (hObject=0xa4) returned 1 [0196.956] AreFileApisANSI () returned 1 [0196.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0196.957] CloseHandle (hObject=0xa4) returned 1 [0196.957] AreFileApisANSI () returned 1 [0196.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0196.960] CloseHandle (hObject=0xa4) returned 1 [0196.960] AreFileApisANSI () returned 1 [0196.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 188 [0196.963] CloseHandle (hObject=0xa4) returned 1 [0196.963] AreFileApisANSI () returned 1 [0196.963] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 185 [0196.964] CloseHandle (hObject=0xa4) returned 1 [0196.965] AreFileApisANSI () returned 1 [0196.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2100, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 188 [0196.966] CloseHandle (hObject=0xa4) returned 1 [0196.967] AreFileApisANSI () returned 1 [0196.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496ad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 204 [0196.984] GetFileType (hFile=0xa8) returned 0x1 [0196.985] CloseHandle (hObject=0xa8) returned 1 [0196.985] AreFileApisANSI () returned 1 [0196.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 201 [0196.986] CloseHandle (hObject=0xa8) returned 1 [0196.987] AreFileApisANSI () returned 1 [0196.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496510, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 204 [0196.988] CloseHandle (hObject=0xa8) returned 1 [0196.988] AreFileApisANSI () returned 1 [0196.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 203 [0197.546] CloseHandle (hObject=0xac) returned 1 [0197.547] AreFileApisANSI () returned 1 [0197.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 203 [0197.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499a98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 212 [0197.547] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0197.549] AreFileApisANSI () returned 1 [0197.549] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0197.550] CloseHandle (hObject=0xa4) returned 1 [0197.550] AreFileApisANSI () returned 1 [0197.550] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0197.552] CloseHandle (hObject=0xa4) returned 1 [0197.552] AreFileApisANSI () returned 1 [0197.552] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0197.554] CloseHandle (hObject=0xa4) returned 1 [0197.555] AreFileApisANSI () returned 1 [0197.555] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0197.555] GetFileType (hFile=0xa4) returned 0x1 [0197.556] CloseHandle (hObject=0xa4) returned 1 [0197.557] AreFileApisANSI () returned 1 [0197.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0197.559] CloseHandle (hObject=0xa4) returned 1 [0197.559] AreFileApisANSI () returned 1 [0197.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0197.560] CloseHandle (hObject=0xa4) returned 1 [0197.561] AreFileApisANSI () returned 1 [0197.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0197.572] CloseHandle (hObject=0xa8) returned 1 [0197.572] AreFileApisANSI () returned 1 [0197.572] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0197.572] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2f18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0197.572] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0197.574] AreFileApisANSI () returned 1 [0197.574] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0197.575] CloseHandle (hObject=0xa4) returned 1 [0197.575] AreFileApisANSI () returned 1 [0197.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0197.577] CloseHandle (hObject=0xa4) returned 1 [0197.577] AreFileApisANSI () returned 1 [0197.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0197.580] CloseHandle (hObject=0xa4) returned 1 [0197.580] AreFileApisANSI () returned 1 [0197.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0197.582] CloseHandle (hObject=0xa4) returned 1 [0197.582] AreFileApisANSI () returned 1 [0197.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0197.583] CloseHandle (hObject=0xa4) returned 1 [0197.584] AreFileApisANSI () returned 1 [0197.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0197.586] CloseHandle (hObject=0xa4) returned 1 [0197.586] AreFileApisANSI () returned 1 [0197.586] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0197.603] GetFileType (hFile=0xa0) returned 0x1 [0197.604] CloseHandle (hObject=0xa0) returned 1 [0197.604] AreFileApisANSI () returned 1 [0197.604] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0197.605] CloseHandle (hObject=0xa0) returned 1 [0197.606] AreFileApisANSI () returned 1 [0197.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0197.607] CloseHandle (hObject=0xa0) returned 1 [0197.607] AreFileApisANSI () returned 1 [0197.607] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0197.622] CloseHandle (hObject=0xa4) returned 1 [0197.622] AreFileApisANSI () returned 1 [0197.622] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0197.624] CloseHandle (hObject=0xa4) returned 1 [0197.624] AreFileApisANSI () returned 1 [0197.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0197.625] CloseHandle (hObject=0xa4) returned 1 [0197.626] AreFileApisANSI () returned 1 [0197.626] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0197.628] CloseHandle (hObject=0xa8) returned 1 [0197.629] AreFileApisANSI () returned 1 [0197.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0197.630] CloseHandle (hObject=0xa8) returned 1 [0197.630] AreFileApisANSI () returned 1 [0197.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0197.644] CloseHandle (hObject=0xa8) returned 1 [0197.644] AreFileApisANSI () returned 1 [0197.645] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0197.646] CloseHandle (hObject=0xa8) returned 1 [0197.646] AreFileApisANSI () returned 1 [0197.646] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0197.649] CloseHandle (hObject=0xa8) returned 1 [0197.649] AreFileApisANSI () returned 1 [0197.649] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0197.652] CloseHandle (hObject=0xa8) returned 1 [0197.652] AreFileApisANSI () returned 1 [0197.652] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0197.654] CloseHandle (hObject=0xa8) returned 1 [0197.654] AreFileApisANSI () returned 1 [0197.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0197.655] CloseHandle (hObject=0xa8) returned 1 [0197.656] AreFileApisANSI () returned 1 [0197.656] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0197.667] CloseHandle (hObject=0xa8) returned 1 [0197.668] AreFileApisANSI () returned 1 [0197.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0197.670] CloseHandle (hObject=0xa8) returned 1 [0197.671] AreFileApisANSI () returned 1 [0197.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0197.673] CloseHandle (hObject=0xa8) returned 1 [0197.674] AreFileApisANSI () returned 1 [0197.674] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0197.676] CloseHandle (hObject=0xa8) returned 1 [0197.677] AreFileApisANSI () returned 1 [0197.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0197.678] CloseHandle (hObject=0xac) returned 1 [0197.679] AreFileApisANSI () returned 1 [0197.679] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0197.680] CloseHandle (hObject=0xac) returned 1 [0197.681] AreFileApisANSI () returned 1 [0197.681] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0197.684] CloseHandle (hObject=0xac) returned 1 [0197.684] AreFileApisANSI () returned 1 [0197.684] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 139 [0197.686] CloseHandle (hObject=0xb0) returned 1 [0197.687] AreFileApisANSI () returned 1 [0197.687] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a55e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0197.697] CloseHandle (hObject=0xb0) returned 1 [0197.698] AreFileApisANSI () returned 1 [0197.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 139 [0197.699] CloseHandle (hObject=0xb0) returned 1 [0197.699] AreFileApisANSI () returned 1 [0197.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0197.701] CloseHandle (hObject=0xa8) returned 1 [0197.701] AreFileApisANSI () returned 1 [0197.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0197.702] CloseHandle (hObject=0xa8) returned 1 [0197.702] AreFileApisANSI () returned 1 [0197.702] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0197.713] CloseHandle (hObject=0xa8) returned 1 [0197.714] AreFileApisANSI () returned 1 [0197.714] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0197.715] CloseHandle (hObject=0xa4) returned 1 [0197.715] AreFileApisANSI () returned 1 [0197.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0197.717] CloseHandle (hObject=0xa4) returned 1 [0197.717] AreFileApisANSI () returned 1 [0197.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0197.719] CloseHandle (hObject=0xa4) returned 1 [0197.720] AreFileApisANSI () returned 1 [0197.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0197.722] CloseHandle (hObject=0xa4) returned 1 [0197.722] AreFileApisANSI () returned 1 [0197.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0197.723] CloseHandle (hObject=0xa4) returned 1 [0197.724] AreFileApisANSI () returned 1 [0197.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0197.726] CloseHandle (hObject=0xa4) returned 1 [0197.727] AreFileApisANSI () returned 1 [0197.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0197.728] CloseHandle (hObject=0xa4) returned 1 [0197.729] AreFileApisANSI () returned 1 [0197.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0197.731] CloseHandle (hObject=0xa4) returned 1 [0197.732] AreFileApisANSI () returned 1 [0197.732] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0197.733] CloseHandle (hObject=0xa4) returned 1 [0197.733] AreFileApisANSI () returned 1 [0197.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3cc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 180 [0197.741] CloseHandle (hObject=0xa4) returned 1 [0197.742] AreFileApisANSI () returned 1 [0197.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a4390, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 177 [0197.743] CloseHandle (hObject=0xa4) returned 1 [0197.744] AreFileApisANSI () returned 1 [0197.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3600, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 180 [0197.745] CloseHandle (hObject=0xa4) returned 1 [0197.745] AreFileApisANSI () returned 1 [0197.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1db8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 196 [0197.749] CloseHandle (hObject=0xa8) returned 1 [0197.750] AreFileApisANSI () returned 1 [0197.750] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 193 [0197.751] CloseHandle (hObject=0xa8) returned 1 [0197.751] AreFileApisANSI () returned 1 [0197.751] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1db8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 196 [0197.752] CloseHandle (hObject=0xa8) returned 1 [0197.753] AreFileApisANSI () returned 1 [0197.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 195 [0197.772] CloseHandle (hObject=0xac) returned 1 [0197.773] AreFileApisANSI () returned 1 [0197.773] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 195 [0197.773] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a6668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 204 [0197.773] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0197.774] AreFileApisANSI () returned 1 [0197.774] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0197.775] CloseHandle (hObject=0xa4) returned 1 [0197.775] AreFileApisANSI () returned 1 [0197.775] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0197.776] CloseHandle (hObject=0xa4) returned 1 [0197.777] AreFileApisANSI () returned 1 [0197.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0197.779] CloseHandle (hObject=0xa4) returned 1 [0197.779] AreFileApisANSI () returned 1 [0197.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0197.782] GetFileType (hFile=0xa4) returned 0x1 [0197.783] CloseHandle (hObject=0xa4) returned 1 [0197.783] AreFileApisANSI () returned 1 [0197.783] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0197.785] CloseHandle (hObject=0xa4) returned 1 [0197.785] AreFileApisANSI () returned 1 [0197.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0197.786] CloseHandle (hObject=0xa4) returned 1 [0197.786] AreFileApisANSI () returned 1 [0197.786] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0197.798] CloseHandle (hObject=0xa8) returned 1 [0197.798] AreFileApisANSI () returned 1 [0197.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0197.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a28b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0197.798] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0197.800] AreFileApisANSI () returned 1 [0197.800] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0197.801] CloseHandle (hObject=0xa4) returned 1 [0197.801] AreFileApisANSI () returned 1 [0197.801] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0197.802] CloseHandle (hObject=0xa4) returned 1 [0197.803] AreFileApisANSI () returned 1 [0197.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0197.807] CloseHandle (hObject=0xa4) returned 1 [0197.808] AreFileApisANSI () returned 1 [0197.808] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0197.809] CloseHandle (hObject=0xa4) returned 1 [0197.809] AreFileApisANSI () returned 1 [0197.809] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0197.810] CloseHandle (hObject=0xa4) returned 1 [0197.810] AreFileApisANSI () returned 1 [0197.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0197.842] CloseHandle (hObject=0xa4) returned 1 [0197.843] AreFileApisANSI () returned 1 [0197.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0197.860] GetFileType (hFile=0xa0) returned 0x1 [0197.860] CloseHandle (hObject=0xa0) returned 1 [0197.861] AreFileApisANSI () returned 1 [0197.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0197.862] CloseHandle (hObject=0xa0) returned 1 [0197.862] AreFileApisANSI () returned 1 [0197.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0197.863] CloseHandle (hObject=0xa0) returned 1 [0197.864] AreFileApisANSI () returned 1 [0197.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0197.868] CloseHandle (hObject=0xa4) returned 1 [0197.869] AreFileApisANSI () returned 1 [0197.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0197.870] CloseHandle (hObject=0xa4) returned 1 [0197.870] AreFileApisANSI () returned 1 [0197.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0197.871] CloseHandle (hObject=0xa4) returned 1 [0197.871] AreFileApisANSI () returned 1 [0197.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0197.873] CloseHandle (hObject=0xa8) returned 1 [0197.874] AreFileApisANSI () returned 1 [0197.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0197.875] CloseHandle (hObject=0xa8) returned 1 [0197.875] AreFileApisANSI () returned 1 [0197.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0197.892] CloseHandle (hObject=0xa8) returned 1 [0197.893] AreFileApisANSI () returned 1 [0197.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0197.904] CloseHandle (hObject=0xa8) returned 1 [0197.904] AreFileApisANSI () returned 1 [0197.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0197.905] CloseHandle (hObject=0xa8) returned 1 [0197.906] AreFileApisANSI () returned 1 [0197.906] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0197.907] CloseHandle (hObject=0xa8) returned 1 [0197.908] AreFileApisANSI () returned 1 [0197.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0197.909] CloseHandle (hObject=0xa8) returned 1 [0197.909] AreFileApisANSI () returned 1 [0197.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0197.910] CloseHandle (hObject=0xa8) returned 1 [0197.910] AreFileApisANSI () returned 1 [0197.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0197.913] CloseHandle (hObject=0xa8) returned 1 [0197.913] AreFileApisANSI () returned 1 [0197.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0197.914] CloseHandle (hObject=0xa8) returned 1 [0197.914] AreFileApisANSI () returned 1 [0197.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0197.915] CloseHandle (hObject=0xa8) returned 1 [0197.915] AreFileApisANSI () returned 1 [0197.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0197.917] CloseHandle (hObject=0xa8) returned 1 [0197.918] AreFileApisANSI () returned 1 [0197.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0197.919] CloseHandle (hObject=0xa4) returned 1 [0197.919] AreFileApisANSI () returned 1 [0197.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0197.920] CloseHandle (hObject=0xa4) returned 1 [0197.920] AreFileApisANSI () returned 1 [0197.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0197.925] CloseHandle (hObject=0xa4) returned 1 [0197.926] AreFileApisANSI () returned 1 [0197.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0197.927] CloseHandle (hObject=0xa4) returned 1 [0197.927] AreFileApisANSI () returned 1 [0197.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0197.928] CloseHandle (hObject=0xa4) returned 1 [0197.928] AreFileApisANSI () returned 1 [0197.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0197.930] CloseHandle (hObject=0xa4) returned 1 [0197.931] AreFileApisANSI () returned 1 [0197.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0197.932] CloseHandle (hObject=0xa4) returned 1 [0197.932] AreFileApisANSI () returned 1 [0197.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0197.933] CloseHandle (hObject=0xa4) returned 1 [0197.933] AreFileApisANSI () returned 1 [0197.933] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0197.935] CloseHandle (hObject=0xa4) returned 1 [0197.935] AreFileApisANSI () returned 1 [0197.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f3c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0197.937] CloseHandle (hObject=0xa4) returned 1 [0197.937] AreFileApisANSI () returned 1 [0197.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eda0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 156 [0197.939] CloseHandle (hObject=0xa4) returned 1 [0197.939] AreFileApisANSI () returned 1 [0197.939] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ee80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0197.941] CloseHandle (hObject=0xa4) returned 1 [0197.941] AreFileApisANSI () returned 1 [0197.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0197.944] GetFileType (hFile=0xa8) returned 0x1 [0197.945] CloseHandle (hObject=0xa8) returned 1 [0197.945] AreFileApisANSI () returned 1 [0197.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a38e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 172 [0197.946] CloseHandle (hObject=0xa8) returned 1 [0197.947] AreFileApisANSI () returned 1 [0197.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3dc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0197.947] CloseHandle (hObject=0xa8) returned 1 [0197.948] AreFileApisANSI () returned 1 [0197.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 174 [0198.021] CloseHandle (hObject=0xac) returned 1 [0198.021] AreFileApisANSI () returned 1 [0198.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 174 [0198.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a55e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 183 [0198.021] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0198.022] AreFileApisANSI () returned 1 [0198.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0198.023] CloseHandle (hObject=0xa4) returned 1 [0198.024] AreFileApisANSI () returned 1 [0198.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0198.025] CloseHandle (hObject=0xa4) returned 1 [0198.025] AreFileApisANSI () returned 1 [0198.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0198.038] CloseHandle (hObject=0xa4) returned 1 [0198.038] AreFileApisANSI () returned 1 [0198.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.039] GetFileType (hFile=0xa4) returned 0x1 [0198.039] CloseHandle (hObject=0xa4) returned 1 [0198.040] AreFileApisANSI () returned 1 [0198.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0198.041] CloseHandle (hObject=0xa4) returned 1 [0198.042] AreFileApisANSI () returned 1 [0198.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.043] CloseHandle (hObject=0xa4) returned 1 [0198.043] AreFileApisANSI () returned 1 [0198.043] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0198.070] CloseHandle (hObject=0xa8) returned 1 [0198.070] AreFileApisANSI () returned 1 [0198.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0198.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3138, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0198.070] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0198.071] AreFileApisANSI () returned 1 [0198.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0198.073] CloseHandle (hObject=0xa4) returned 1 [0198.073] AreFileApisANSI () returned 1 [0198.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0198.074] CloseHandle (hObject=0xa4) returned 1 [0198.074] AreFileApisANSI () returned 1 [0198.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0198.086] CloseHandle (hObject=0xa4) returned 1 [0198.087] AreFileApisANSI () returned 1 [0198.087] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0198.089] CloseHandle (hObject=0xa4) returned 1 [0198.089] AreFileApisANSI () returned 1 [0198.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0198.090] CloseHandle (hObject=0xa4) returned 1 [0198.090] AreFileApisANSI () returned 1 [0198.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0198.093] CloseHandle (hObject=0xa4) returned 1 [0198.094] AreFileApisANSI () returned 1 [0198.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0198.109] CloseHandle (hObject=0xa0) returned 1 [0198.109] AreFileApisANSI () returned 1 [0198.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0198.110] CloseHandle (hObject=0xa0) returned 1 [0198.110] AreFileApisANSI () returned 1 [0198.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0198.111] CloseHandle (hObject=0xa0) returned 1 [0198.112] AreFileApisANSI () returned 1 [0198.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0198.117] CloseHandle (hObject=0xa4) returned 1 [0198.117] AreFileApisANSI () returned 1 [0198.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0198.118] CloseHandle (hObject=0xa4) returned 1 [0198.118] AreFileApisANSI () returned 1 [0198.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0198.119] CloseHandle (hObject=0xa4) returned 1 [0198.120] AreFileApisANSI () returned 1 [0198.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0198.121] CloseHandle (hObject=0xa8) returned 1 [0198.121] AreFileApisANSI () returned 1 [0198.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0198.122] CloseHandle (hObject=0xa8) returned 1 [0198.122] AreFileApisANSI () returned 1 [0198.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0198.134] CloseHandle (hObject=0xa8) returned 1 [0198.134] AreFileApisANSI () returned 1 [0198.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0198.135] CloseHandle (hObject=0xa8) returned 1 [0198.136] AreFileApisANSI () returned 1 [0198.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0198.137] CloseHandle (hObject=0xa8) returned 1 [0198.137] AreFileApisANSI () returned 1 [0198.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0198.139] CloseHandle (hObject=0xa8) returned 1 [0198.140] AreFileApisANSI () returned 1 [0198.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0198.141] CloseHandle (hObject=0xa8) returned 1 [0198.141] AreFileApisANSI () returned 1 [0198.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0198.142] CloseHandle (hObject=0xa8) returned 1 [0198.142] AreFileApisANSI () returned 1 [0198.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0198.144] CloseHandle (hObject=0xa8) returned 1 [0198.145] AreFileApisANSI () returned 1 [0198.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.146] CloseHandle (hObject=0xa8) returned 1 [0198.147] AreFileApisANSI () returned 1 [0198.147] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0198.148] CloseHandle (hObject=0xa8) returned 1 [0198.148] AreFileApisANSI () returned 1 [0198.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.150] CloseHandle (hObject=0xa8) returned 1 [0198.150] AreFileApisANSI () returned 1 [0198.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.151] CloseHandle (hObject=0xa4) returned 1 [0198.152] AreFileApisANSI () returned 1 [0198.152] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0198.153] CloseHandle (hObject=0xa4) returned 1 [0198.153] AreFileApisANSI () returned 1 [0198.153] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.161] CloseHandle (hObject=0xa4) returned 1 [0198.161] AreFileApisANSI () returned 1 [0198.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0198.162] CloseHandle (hObject=0xa4) returned 1 [0198.162] AreFileApisANSI () returned 1 [0198.162] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.163] CloseHandle (hObject=0xa4) returned 1 [0198.164] AreFileApisANSI () returned 1 [0198.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0198.166] CloseHandle (hObject=0xa4) returned 1 [0198.166] AreFileApisANSI () returned 1 [0198.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0198.167] CloseHandle (hObject=0xa4) returned 1 [0198.168] AreFileApisANSI () returned 1 [0198.168] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.169] CloseHandle (hObject=0xa4) returned 1 [0198.169] AreFileApisANSI () returned 1 [0198.169] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0198.171] CloseHandle (hObject=0xa4) returned 1 [0198.172] AreFileApisANSI () returned 1 [0198.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f2e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 162 [0198.173] CloseHandle (hObject=0xa4) returned 1 [0198.173] AreFileApisANSI () returned 1 [0198.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f040, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 159 [0198.176] CloseHandle (hObject=0xa4) returned 1 [0198.176] AreFileApisANSI () returned 1 [0198.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ef60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 162 [0198.177] CloseHandle (hObject=0xa4) returned 1 [0198.177] AreFileApisANSI () returned 1 [0198.177] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a41a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 178 [0198.184] GetFileType (hFile=0xa8) returned 0x1 [0198.185] CloseHandle (hObject=0xa8) returned 1 [0198.185] AreFileApisANSI () returned 1 [0198.185] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a38e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0198.186] CloseHandle (hObject=0xa8) returned 1 [0198.187] AreFileApisANSI () returned 1 [0198.187] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a37f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 178 [0198.188] CloseHandle (hObject=0xa8) returned 1 [0198.188] AreFileApisANSI () returned 1 [0198.188] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 177 [0198.247] CloseHandle (hObject=0xac) returned 1 [0198.247] AreFileApisANSI () returned 1 [0198.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 177 [0198.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 186 [0198.247] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0198.248] AreFileApisANSI () returned 1 [0198.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0198.249] CloseHandle (hObject=0xa4) returned 1 [0198.250] AreFileApisANSI () returned 1 [0198.250] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0198.251] CloseHandle (hObject=0xa4) returned 1 [0198.251] AreFileApisANSI () returned 1 [0198.251] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0198.262] CloseHandle (hObject=0xa4) returned 1 [0198.262] AreFileApisANSI () returned 1 [0198.262] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0198.263] GetFileType (hFile=0xa4) returned 0x1 [0198.263] CloseHandle (hObject=0xa4) returned 1 [0198.264] AreFileApisANSI () returned 1 [0198.264] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0198.266] CloseHandle (hObject=0xa4) returned 1 [0198.266] AreFileApisANSI () returned 1 [0198.266] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0198.267] CloseHandle (hObject=0xa4) returned 1 [0198.268] AreFileApisANSI () returned 1 [0198.268] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0198.278] CloseHandle (hObject=0xa8) returned 1 [0198.279] AreFileApisANSI () returned 1 [0198.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0198.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0198.279] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0198.280] AreFileApisANSI () returned 1 [0198.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0198.281] CloseHandle (hObject=0xa4) returned 1 [0198.281] AreFileApisANSI () returned 1 [0198.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0198.282] CloseHandle (hObject=0xa4) returned 1 [0198.283] AreFileApisANSI () returned 1 [0198.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0198.285] CloseHandle (hObject=0xa4) returned 1 [0198.285] AreFileApisANSI () returned 1 [0198.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0198.286] CloseHandle (hObject=0xa4) returned 1 [0198.286] AreFileApisANSI () returned 1 [0198.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0198.287] CloseHandle (hObject=0xa4) returned 1 [0198.288] AreFileApisANSI () returned 1 [0198.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0198.298] CloseHandle (hObject=0xa4) returned 1 [0198.298] AreFileApisANSI () returned 1 [0198.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.301] GetFileType (hFile=0xa0) returned 0x1 [0198.302] CloseHandle (hObject=0xa0) returned 1 [0198.302] AreFileApisANSI () returned 1 [0198.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0198.303] CloseHandle (hObject=0xa0) returned 1 [0198.304] AreFileApisANSI () returned 1 [0198.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.305] CloseHandle (hObject=0xa0) returned 1 [0198.305] AreFileApisANSI () returned 1 [0198.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0198.309] CloseHandle (hObject=0xa4) returned 1 [0198.310] AreFileApisANSI () returned 1 [0198.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.311] CloseHandle (hObject=0xa4) returned 1 [0198.311] AreFileApisANSI () returned 1 [0198.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0198.312] CloseHandle (hObject=0xa4) returned 1 [0198.313] AreFileApisANSI () returned 1 [0198.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0198.314] CloseHandle (hObject=0xa8) returned 1 [0198.314] AreFileApisANSI () returned 1 [0198.315] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0198.316] CloseHandle (hObject=0xa8) returned 1 [0198.316] AreFileApisANSI () returned 1 [0198.316] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0198.319] CloseHandle (hObject=0xa8) returned 1 [0198.319] AreFileApisANSI () returned 1 [0198.319] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0198.320] CloseHandle (hObject=0xa8) returned 1 [0198.321] AreFileApisANSI () returned 1 [0198.321] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0198.321] CloseHandle (hObject=0xa8) returned 1 [0198.322] AreFileApisANSI () returned 1 [0198.322] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0198.333] CloseHandle (hObject=0xa8) returned 1 [0198.334] AreFileApisANSI () returned 1 [0198.334] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0198.335] CloseHandle (hObject=0xa8) returned 1 [0198.335] AreFileApisANSI () returned 1 [0198.335] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0198.336] CloseHandle (hObject=0xa8) returned 1 [0198.336] AreFileApisANSI () returned 1 [0198.336] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0198.339] CloseHandle (hObject=0xa8) returned 1 [0198.339] AreFileApisANSI () returned 1 [0198.339] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0198.340] CloseHandle (hObject=0xa8) returned 1 [0198.341] AreFileApisANSI () returned 1 [0198.341] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0198.341] CloseHandle (hObject=0xa8) returned 1 [0198.342] AreFileApisANSI () returned 1 [0198.342] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0198.344] CloseHandle (hObject=0xa8) returned 1 [0198.344] AreFileApisANSI () returned 1 [0198.344] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0198.346] CloseHandle (hObject=0xa4) returned 1 [0198.346] AreFileApisANSI () returned 1 [0198.346] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0198.347] CloseHandle (hObject=0xa4) returned 1 [0198.347] AreFileApisANSI () returned 1 [0198.347] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0198.349] CloseHandle (hObject=0xa4) returned 1 [0198.350] AreFileApisANSI () returned 1 [0198.350] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0198.350] CloseHandle (hObject=0xa4) returned 1 [0198.351] AreFileApisANSI () returned 1 [0198.351] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0198.352] CloseHandle (hObject=0xa4) returned 1 [0198.352] AreFileApisANSI () returned 1 [0198.352] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0198.356] CloseHandle (hObject=0xa4) returned 1 [0198.357] AreFileApisANSI () returned 1 [0198.357] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0198.358] CloseHandle (hObject=0xa4) returned 1 [0198.358] AreFileApisANSI () returned 1 [0198.358] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0198.359] CloseHandle (hObject=0xa4) returned 1 [0198.360] AreFileApisANSI () returned 1 [0198.360] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0198.361] CloseHandle (hObject=0xa4) returned 1 [0198.362] AreFileApisANSI () returned 1 [0198.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a37f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 178 [0198.365] CloseHandle (hObject=0xa4) returned 1 [0198.366] AreFileApisANSI () returned 1 [0198.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0198.367] CloseHandle (hObject=0xa4) returned 1 [0198.367] AreFileApisANSI () returned 1 [0198.367] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a39e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 178 [0198.368] CloseHandle (hObject=0xa4) returned 1 [0198.368] AreFileApisANSI () returned 1 [0198.368] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 194 [0198.386] GetFileType (hFile=0xa8) returned 0x1 [0198.386] CloseHandle (hObject=0xa8) returned 1 [0198.387] AreFileApisANSI () returned 1 [0198.387] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1958, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 191 [0198.388] CloseHandle (hObject=0xa8) returned 1 [0198.388] AreFileApisANSI () returned 1 [0198.388] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a14f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 194 [0198.389] CloseHandle (hObject=0xa8) returned 1 [0198.389] AreFileApisANSI () returned 1 [0198.389] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 193 [0198.445] CloseHandle (hObject=0xac) returned 1 [0198.445] AreFileApisANSI () returned 1 [0198.446] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 193 [0198.446] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a6aa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 202 [0198.446] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0198.447] AreFileApisANSI () returned 1 [0198.447] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0198.448] CloseHandle (hObject=0xa4) returned 1 [0198.449] AreFileApisANSI () returned 1 [0198.449] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0198.450] CloseHandle (hObject=0xa4) returned 1 [0198.450] AreFileApisANSI () returned 1 [0198.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0198.462] CloseHandle (hObject=0xa4) returned 1 [0198.462] AreFileApisANSI () returned 1 [0198.462] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0198.463] GetFileType (hFile=0xa4) returned 0x1 [0198.464] CloseHandle (hObject=0xa4) returned 1 [0198.464] AreFileApisANSI () returned 1 [0198.464] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0198.466] CloseHandle (hObject=0xa4) returned 1 [0198.466] AreFileApisANSI () returned 1 [0198.466] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0198.467] CloseHandle (hObject=0xa4) returned 1 [0198.468] AreFileApisANSI () returned 1 [0198.468] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0198.478] CloseHandle (hObject=0xa8) returned 1 [0198.478] AreFileApisANSI () returned 1 [0198.478] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0198.478] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2a50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0198.478] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0198.481] AreFileApisANSI () returned 1 [0198.481] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0198.482] CloseHandle (hObject=0xa4) returned 1 [0198.482] AreFileApisANSI () returned 1 [0198.482] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0198.483] CloseHandle (hObject=0xa4) returned 1 [0198.483] AreFileApisANSI () returned 1 [0198.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0198.485] CloseHandle (hObject=0xa4) returned 1 [0198.486] AreFileApisANSI () returned 1 [0198.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0198.487] CloseHandle (hObject=0xa4) returned 1 [0198.487] AreFileApisANSI () returned 1 [0198.487] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0198.488] CloseHandle (hObject=0xa4) returned 1 [0198.489] AreFileApisANSI () returned 1 [0198.489] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0198.492] CloseHandle (hObject=0xa4) returned 1 [0198.492] AreFileApisANSI () returned 1 [0198.492] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0198.496] GetFileType (hFile=0xa0) returned 0x1 [0198.496] CloseHandle (hObject=0xa0) returned 1 [0198.497] AreFileApisANSI () returned 1 [0198.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0198.498] CloseHandle (hObject=0xa0) returned 1 [0198.498] AreFileApisANSI () returned 1 [0198.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0198.499] CloseHandle (hObject=0xa0) returned 1 [0198.500] AreFileApisANSI () returned 1 [0198.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0198.504] CloseHandle (hObject=0xa4) returned 1 [0198.505] AreFileApisANSI () returned 1 [0198.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0198.506] CloseHandle (hObject=0xa4) returned 1 [0198.506] AreFileApisANSI () returned 1 [0198.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0198.507] CloseHandle (hObject=0xa4) returned 1 [0198.508] AreFileApisANSI () returned 1 [0198.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0198.509] CloseHandle (hObject=0xa8) returned 1 [0198.510] AreFileApisANSI () returned 1 [0198.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0198.521] CloseHandle (hObject=0xa8) returned 1 [0198.521] AreFileApisANSI () returned 1 [0198.521] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0198.522] CloseHandle (hObject=0xa8) returned 1 [0198.523] AreFileApisANSI () returned 1 [0198.523] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0198.524] CloseHandle (hObject=0xac) returned 1 [0198.525] AreFileApisANSI () returned 1 [0198.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0198.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2830, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0198.526] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0198.527] AreFileApisANSI () returned 1 [0198.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0198.529] CloseHandle (hObject=0xa8) returned 1 [0198.529] AreFileApisANSI () returned 1 [0198.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0198.531] CloseHandle (hObject=0xa8) returned 1 [0198.532] AreFileApisANSI () returned 1 [0198.532] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0198.533] CloseHandle (hObject=0xa8) returned 1 [0198.533] AreFileApisANSI () returned 1 [0198.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.534] CloseHandle (hObject=0xac) returned 1 [0198.534] AreFileApisANSI () returned 1 [0198.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a32d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0198.534] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcookies\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcookies\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0198.535] AreFileApisANSI () returned 1 [0198.535] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0198.536] CloseHandle (hObject=0xa8) returned 1 [0198.537] AreFileApisANSI () returned 1 [0198.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0198.538] CloseHandle (hObject=0xa8) returned 1 [0198.538] AreFileApisANSI () returned 1 [0198.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0198.540] CloseHandle (hObject=0xa8) returned 1 [0198.541] AreFileApisANSI () returned 1 [0198.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0198.542] CloseHandle (hObject=0xa8) returned 1 [0198.543] AreFileApisANSI () returned 1 [0198.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0198.545] CloseHandle (hObject=0xa8) returned 1 [0198.546] AreFileApisANSI () returned 1 [0198.546] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0198.547] CloseHandle (hObject=0xa8) returned 1 [0198.547] AreFileApisANSI () returned 1 [0198.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0198.549] CloseHandle (hObject=0xac) returned 1 [0198.550] AreFileApisANSI () returned 1 [0198.550] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0198.553] CloseHandle (hObject=0xac) returned 1 [0198.553] AreFileApisANSI () returned 1 [0198.553] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0198.555] CloseHandle (hObject=0xac) returned 1 [0198.555] AreFileApisANSI () returned 1 [0198.555] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 142 [0198.574] CloseHandle (hObject=0xb0) returned 1 [0198.574] AreFileApisANSI () returned 1 [0198.574] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a55e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 139 [0198.575] CloseHandle (hObject=0xb0) returned 1 [0198.576] AreFileApisANSI () returned 1 [0198.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 142 [0198.577] CloseHandle (hObject=0xb0) returned 1 [0198.577] AreFileApisANSI () returned 1 [0198.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a55e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0198.581] CloseHandle (hObject=0xb0) returned 1 [0198.581] AreFileApisANSI () returned 1 [0198.581] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0198.582] CloseHandle (hObject=0xb0) returned 1 [0198.583] AreFileApisANSI () returned 1 [0198.583] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 143 [0198.584] CloseHandle (hObject=0xb0) returned 1 [0198.584] AreFileApisANSI () returned 1 [0198.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.585] CloseHandle (hObject=0xa8) returned 1 [0198.585] AreFileApisANSI () returned 1 [0198.585] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0198.586] CloseHandle (hObject=0xa8) returned 1 [0198.586] AreFileApisANSI () returned 1 [0198.586] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.597] CloseHandle (hObject=0xa8) returned 1 [0198.598] AreFileApisANSI () returned 1 [0198.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.599] CloseHandle (hObject=0xa4) returned 1 [0198.599] AreFileApisANSI () returned 1 [0198.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0198.600] CloseHandle (hObject=0xa4) returned 1 [0198.600] AreFileApisANSI () returned 1 [0198.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.602] CloseHandle (hObject=0xa4) returned 1 [0198.603] AreFileApisANSI () returned 1 [0198.603] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0198.604] CloseHandle (hObject=0xa4) returned 1 [0198.604] AreFileApisANSI () returned 1 [0198.604] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.605] CloseHandle (hObject=0xa4) returned 1 [0198.605] AreFileApisANSI () returned 1 [0198.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0198.608] CloseHandle (hObject=0xa4) returned 1 [0198.608] AreFileApisANSI () returned 1 [0198.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0198.609] CloseHandle (hObject=0xa4) returned 1 [0198.610] AreFileApisANSI () returned 1 [0198.610] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.610] CloseHandle (hObject=0xa4) returned 1 [0198.611] AreFileApisANSI () returned 1 [0198.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0198.620] CloseHandle (hObject=0xa4) returned 1 [0198.622] AreFileApisANSI () returned 1 [0198.622] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 157 [0198.623] CloseHandle (hObject=0xa4) returned 1 [0198.623] AreFileApisANSI () returned 1 [0198.623] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f200, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 154 [0198.625] CloseHandle (hObject=0xa4) returned 1 [0198.626] AreFileApisANSI () returned 1 [0198.626] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 157 [0198.627] CloseHandle (hObject=0xa4) returned 1 [0198.627] AreFileApisANSI () returned 1 [0198.627] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3bd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 173 [0198.635] CloseHandle (hObject=0xa8) returned 1 [0198.635] AreFileApisANSI () returned 1 [0198.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3bd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 170 [0198.637] CloseHandle (hObject=0xa8) returned 1 [0198.637] AreFileApisANSI () returned 1 [0198.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3ad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 173 [0198.638] CloseHandle (hObject=0xa8) returned 1 [0198.638] AreFileApisANSI () returned 1 [0198.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 172 [0198.776] CloseHandle (hObject=0xac) returned 1 [0198.777] AreFileApisANSI () returned 1 [0198.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 172 [0198.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 181 [0198.777] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0198.778] AreFileApisANSI () returned 1 [0198.778] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0198.779] CloseHandle (hObject=0xa4) returned 1 [0198.779] AreFileApisANSI () returned 1 [0198.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0198.780] CloseHandle (hObject=0xa4) returned 1 [0198.781] AreFileApisANSI () returned 1 [0198.781] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0198.783] CloseHandle (hObject=0xa4) returned 1 [0198.784] AreFileApisANSI () returned 1 [0198.784] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0198.795] GetFileType (hFile=0xa4) returned 0x1 [0198.796] CloseHandle (hObject=0xa4) returned 1 [0198.797] AreFileApisANSI () returned 1 [0198.797] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0198.797] CloseHandle (hObject=0xa4) returned 1 [0198.798] AreFileApisANSI () returned 1 [0198.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0198.799] CloseHandle (hObject=0xa4) returned 1 [0198.800] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x494ee0 [0198.800] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0198.800] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0198.800] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0198.800] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0198.800] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0198.800] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0198.800] AreFileApisANSI () returned 1 [0198.800] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0198.800] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa18, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0198.801] GetFileType (hFile=0xa8) returned 0x1 [0198.801] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac8 | out: lpNewFilePointer=0x0) returned 1 [0198.801] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa7c | out: lpNewFilePointer=0x0) returned 1 [0198.801] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaac | out: lpNewFilePointer=0x0) returned 1 [0198.801] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.801] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.801] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaac | out: lpNewFilePointer=0x0) returned 1 [0198.801] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.801] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.801] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.807] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.807] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.808] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.808] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.809] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.809] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.809] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.809] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.809] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.809] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.809] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.809] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.810] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.810] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.810] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.810] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.810] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.810] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.810] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.810] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.810] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.810] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.810] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.810] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.811] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.811] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.811] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.812] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.812] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.812] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.812] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.812] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.812] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.812] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.812] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.812] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.812] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.813] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.813] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.813] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.813] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.813] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.813] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.813] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.813] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.813] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.813] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.813] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.813] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.814] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.814] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.814] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.814] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.814] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.814] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.814] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.814] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.814] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.814] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.814] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.815] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.815] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.815] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.815] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.815] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.815] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.815] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.815] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.816] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.816] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.816] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.816] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.816] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.816] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.816] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.816] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.816] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.816] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.816] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.816] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.817] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.817] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.817] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.817] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.817] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.817] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.817] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.817] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.817] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.817] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.817] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.818] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.818] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.818] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.818] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.818] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.818] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.818] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.818] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.818] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.818] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.818] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.818] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.818] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.819] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.819] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.819] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.819] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.819] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.819] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.819] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.819] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.819] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.819] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.819] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.819] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.819] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.820] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.820] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.820] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.820] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.820] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.820] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.820] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.820] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.820] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.820] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.820] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.820] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.820] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.820] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.821] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.821] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.821] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.821] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.821] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.821] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.821] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.821] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.821] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.821] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.821] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.821] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.821] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.822] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.822] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.822] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.822] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.822] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.822] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.822] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.822] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.822] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.822] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.822] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.822] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.822] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.822] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.823] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.823] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.823] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.823] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.823] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.823] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.823] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.823] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.823] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.823] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.823] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.823] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.823] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.824] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.824] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.824] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.824] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.824] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.824] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.824] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.824] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.824] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.824] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.824] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.824] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.824] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.824] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.825] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.825] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.825] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.825] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.825] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.825] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.825] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.825] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.825] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.825] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.825] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.825] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.825] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.826] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.826] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.826] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.826] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.826] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.826] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.826] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.826] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.826] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.826] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.826] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.826] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.826] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.826] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.827] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.827] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.827] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.827] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.827] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.827] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.827] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.827] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.827] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.827] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.827] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.827] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.827] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.827] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.828] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.828] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.828] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.828] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.828] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.828] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.828] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.828] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.828] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.828] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.828] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.828] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.828] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.829] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.829] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.829] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.829] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.829] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.829] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.829] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.829] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.829] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.829] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.829] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.829] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.829] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.829] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.830] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.830] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.830] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.830] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.830] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.830] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.830] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.830] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.830] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.830] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.830] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.830] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.830] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.830] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.831] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.831] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.831] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.831] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.831] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.831] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.831] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.831] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.831] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0198.832] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0198.832] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0198.832] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0198.832] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0198.832] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0198.832] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0198.832] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0198.832] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0198.832] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0198.839] CloseHandle (hObject=0xa8) returned 1 [0198.840] AreFileApisANSI () returned 1 [0198.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0198.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0198.840] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0198.842] AreFileApisANSI () returned 1 [0198.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0198.843] CloseHandle (hObject=0xa4) returned 1 [0198.843] AreFileApisANSI () returned 1 [0198.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0198.844] CloseHandle (hObject=0xa4) returned 1 [0198.844] AreFileApisANSI () returned 1 [0198.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0198.852] CloseHandle (hObject=0xa4) returned 1 [0198.852] AreFileApisANSI () returned 1 [0198.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0198.853] CloseHandle (hObject=0xa4) returned 1 [0198.854] AreFileApisANSI () returned 1 [0198.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0198.855] CloseHandle (hObject=0xa4) returned 1 [0198.855] AreFileApisANSI () returned 1 [0198.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0198.857] CloseHandle (hObject=0xa4) returned 1 [0198.857] AreFileApisANSI () returned 1 [0198.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0198.858] CloseHandle (hObject=0xa0) returned 1 [0198.858] AreFileApisANSI () returned 1 [0198.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4981a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0198.859] CloseHandle (hObject=0xa0) returned 1 [0198.859] AreFileApisANSI () returned 1 [0198.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0198.860] CloseHandle (hObject=0xa0) returned 1 [0198.860] AreFileApisANSI () returned 1 [0198.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0198.864] CloseHandle (hObject=0xa4) returned 1 [0198.865] AreFileApisANSI () returned 1 [0198.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0198.866] CloseHandle (hObject=0xa4) returned 1 [0198.866] AreFileApisANSI () returned 1 [0198.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0198.867] CloseHandle (hObject=0xa4) returned 1 [0198.867] AreFileApisANSI () returned 1 [0198.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.869] CloseHandle (hObject=0xa8) returned 1 [0198.869] AreFileApisANSI () returned 1 [0198.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0198.870] CloseHandle (hObject=0xa8) returned 1 [0198.870] AreFileApisANSI () returned 1 [0198.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0198.875] CloseHandle (hObject=0xa8) returned 1 [0198.876] AreFileApisANSI () returned 1 [0198.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0198.876] CloseHandle (hObject=0xa8) returned 1 [0198.877] AreFileApisANSI () returned 1 [0198.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0198.878] CloseHandle (hObject=0xa8) returned 1 [0198.878] AreFileApisANSI () returned 1 [0198.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0198.881] CloseHandle (hObject=0xa8) returned 1 [0198.881] AreFileApisANSI () returned 1 [0198.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0198.882] CloseHandle (hObject=0xa8) returned 1 [0198.882] AreFileApisANSI () returned 1 [0198.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0198.884] CloseHandle (hObject=0xa8) returned 1 [0198.884] AreFileApisANSI () returned 1 [0198.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0198.886] CloseHandle (hObject=0xa8) returned 1 [0198.886] AreFileApisANSI () returned 1 [0198.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0198.887] CloseHandle (hObject=0xa8) returned 1 [0198.887] AreFileApisANSI () returned 1 [0198.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0198.888] CloseHandle (hObject=0xa8) returned 1 [0198.888] AreFileApisANSI () returned 1 [0198.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0198.906] CloseHandle (hObject=0xa8) returned 1 [0198.907] AreFileApisANSI () returned 1 [0198.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0198.908] CloseHandle (hObject=0xa4) returned 1 [0198.908] AreFileApisANSI () returned 1 [0198.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0198.909] CloseHandle (hObject=0xa4) returned 1 [0198.910] AreFileApisANSI () returned 1 [0198.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0198.912] CloseHandle (hObject=0xa4) returned 1 [0198.912] AreFileApisANSI () returned 1 [0198.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0198.913] CloseHandle (hObject=0xa4) returned 1 [0198.914] AreFileApisANSI () returned 1 [0198.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0198.915] CloseHandle (hObject=0xa4) returned 1 [0198.915] AreFileApisANSI () returned 1 [0198.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0198.958] CloseHandle (hObject=0xa4) returned 1 [0198.958] AreFileApisANSI () returned 1 [0198.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0198.959] CloseHandle (hObject=0xa4) returned 1 [0198.960] AreFileApisANSI () returned 1 [0198.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0198.962] CloseHandle (hObject=0xa4) returned 1 [0198.962] AreFileApisANSI () returned 1 [0198.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0198.965] CloseHandle (hObject=0xa4) returned 1 [0198.965] AreFileApisANSI () returned 1 [0198.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5900, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0198.966] CloseHandle (hObject=0xa4) returned 1 [0198.967] AreFileApisANSI () returned 1 [0198.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 145 [0198.979] CloseHandle (hObject=0xa4) returned 1 [0198.979] AreFileApisANSI () returned 1 [0198.979] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0198.980] CloseHandle (hObject=0xa4) returned 1 [0198.980] AreFileApisANSI () returned 1 [0198.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0198.990] CloseHandle (hObject=0xa8) returned 1 [0198.991] AreFileApisANSI () returned 1 [0198.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 161 [0198.992] CloseHandle (hObject=0xa8) returned 1 [0198.992] AreFileApisANSI () returned 1 [0198.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 164 [0198.993] CloseHandle (hObject=0xa8) returned 1 [0198.993] AreFileApisANSI () returned 1 [0198.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 163 [0199.069] CloseHandle (hObject=0xac) returned 1 [0199.070] AreFileApisANSI () returned 1 [0199.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 163 [0199.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a09f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 172 [0199.070] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0199.071] AreFileApisANSI () returned 1 [0199.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0199.072] CloseHandle (hObject=0xa4) returned 1 [0199.072] AreFileApisANSI () returned 1 [0199.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0199.073] CloseHandle (hObject=0xa4) returned 1 [0199.073] AreFileApisANSI () returned 1 [0199.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0199.075] CloseHandle (hObject=0xa4) returned 1 [0199.075] AreFileApisANSI () returned 1 [0199.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0199.076] CloseHandle (hObject=0xa4) returned 1 [0199.076] AreFileApisANSI () returned 1 [0199.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0199.078] CloseHandle (hObject=0xa4) returned 1 [0199.078] AreFileApisANSI () returned 1 [0199.078] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0199.079] CloseHandle (hObject=0xa4) returned 1 [0199.080] AreFileApisANSI () returned 1 [0199.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0199.089] CloseHandle (hObject=0xa8) returned 1 [0199.089] AreFileApisANSI () returned 1 [0199.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0199.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0199.089] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0199.090] AreFileApisANSI () returned 1 [0199.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0199.091] CloseHandle (hObject=0xa4) returned 1 [0199.091] AreFileApisANSI () returned 1 [0199.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0199.092] CloseHandle (hObject=0xa4) returned 1 [0199.092] AreFileApisANSI () returned 1 [0199.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0199.099] CloseHandle (hObject=0xa4) returned 1 [0199.099] AreFileApisANSI () returned 1 [0199.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0199.100] CloseHandle (hObject=0xa4) returned 1 [0199.101] AreFileApisANSI () returned 1 [0199.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0199.102] CloseHandle (hObject=0xa4) returned 1 [0199.102] AreFileApisANSI () returned 1 [0199.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0199.104] CloseHandle (hObject=0xa4) returned 1 [0199.104] AreFileApisANSI () returned 1 [0199.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0199.107] GetFileType (hFile=0xa0) returned 0x1 [0199.108] CloseHandle (hObject=0xa0) returned 1 [0199.108] AreFileApisANSI () returned 1 [0199.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0199.109] CloseHandle (hObject=0xa0) returned 1 [0199.109] AreFileApisANSI () returned 1 [0199.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0199.110] CloseHandle (hObject=0xa0) returned 1 [0199.110] AreFileApisANSI () returned 1 [0199.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0199.114] CloseHandle (hObject=0xa4) returned 1 [0199.115] AreFileApisANSI () returned 1 [0199.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0199.116] CloseHandle (hObject=0xa4) returned 1 [0199.116] AreFileApisANSI () returned 1 [0199.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0199.117] CloseHandle (hObject=0xa4) returned 1 [0199.117] AreFileApisANSI () returned 1 [0199.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0199.118] CloseHandle (hObject=0xa8) returned 1 [0199.119] AreFileApisANSI () returned 1 [0199.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0199.120] CloseHandle (hObject=0xa8) returned 1 [0199.120] AreFileApisANSI () returned 1 [0199.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0199.124] CloseHandle (hObject=0xa8) returned 1 [0199.125] AreFileApisANSI () returned 1 [0199.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0199.126] CloseHandle (hObject=0xa8) returned 1 [0199.126] AreFileApisANSI () returned 1 [0199.126] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0199.127] CloseHandle (hObject=0xa8) returned 1 [0199.128] AreFileApisANSI () returned 1 [0199.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0199.130] CloseHandle (hObject=0xa8) returned 1 [0199.130] AreFileApisANSI () returned 1 [0199.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0199.131] CloseHandle (hObject=0xa8) returned 1 [0199.131] AreFileApisANSI () returned 1 [0199.131] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0199.132] CloseHandle (hObject=0xa8) returned 1 [0199.132] AreFileApisANSI () returned 1 [0199.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0199.135] CloseHandle (hObject=0xa8) returned 1 [0199.135] AreFileApisANSI () returned 1 [0199.135] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0199.136] CloseHandle (hObject=0xa8) returned 1 [0199.136] AreFileApisANSI () returned 1 [0199.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0199.137] CloseHandle (hObject=0xa8) returned 1 [0199.137] AreFileApisANSI () returned 1 [0199.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0199.139] CloseHandle (hObject=0xa8) returned 1 [0199.140] AreFileApisANSI () returned 1 [0199.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0199.141] CloseHandle (hObject=0xa4) returned 1 [0199.141] AreFileApisANSI () returned 1 [0199.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0199.142] CloseHandle (hObject=0xa4) returned 1 [0199.142] AreFileApisANSI () returned 1 [0199.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0199.151] CloseHandle (hObject=0xa4) returned 1 [0199.152] AreFileApisANSI () returned 1 [0199.152] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0199.153] CloseHandle (hObject=0xa4) returned 1 [0199.154] AreFileApisANSI () returned 1 [0199.154] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0199.155] CloseHandle (hObject=0xa4) returned 1 [0199.155] AreFileApisANSI () returned 1 [0199.155] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0199.157] CloseHandle (hObject=0xa4) returned 1 [0199.158] AreFileApisANSI () returned 1 [0199.158] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0199.159] CloseHandle (hObject=0xa4) returned 1 [0199.160] AreFileApisANSI () returned 1 [0199.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0199.161] CloseHandle (hObject=0xa4) returned 1 [0199.161] AreFileApisANSI () returned 1 [0199.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0199.163] CloseHandle (hObject=0xa4) returned 1 [0199.163] AreFileApisANSI () returned 1 [0199.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1958, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 188 [0199.166] CloseHandle (hObject=0xa4) returned 1 [0199.166] AreFileApisANSI () returned 1 [0199.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1a70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 185 [0199.193] CloseHandle (hObject=0xa4) returned 1 [0199.193] AreFileApisANSI () returned 1 [0199.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1a70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 188 [0199.194] CloseHandle (hObject=0xa4) returned 1 [0199.195] AreFileApisANSI () returned 1 [0199.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496d28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 204 [0199.200] CloseHandle (hObject=0xa8) returned 1 [0199.201] AreFileApisANSI () returned 1 [0199.201] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496c00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 201 [0199.202] CloseHandle (hObject=0xa8) returned 1 [0199.202] AreFileApisANSI () returned 1 [0199.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496e50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 204 [0199.203] CloseHandle (hObject=0xa8) returned 1 [0199.203] AreFileApisANSI () returned 1 [0199.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 203 [0199.225] CloseHandle (hObject=0xac) returned 1 [0199.226] AreFileApisANSI () returned 1 [0199.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 203 [0199.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499a98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 212 [0199.226] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0199.227] AreFileApisANSI () returned 1 [0199.227] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0199.228] CloseHandle (hObject=0xa4) returned 1 [0199.228] AreFileApisANSI () returned 1 [0199.228] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0199.229] CloseHandle (hObject=0xa4) returned 1 [0199.229] AreFileApisANSI () returned 1 [0199.229] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0199.239] CloseHandle (hObject=0xa4) returned 1 [0199.239] AreFileApisANSI () returned 1 [0199.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0199.243] CloseHandle (hObject=0xa4) returned 1 [0199.243] AreFileApisANSI () returned 1 [0199.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0199.244] CloseHandle (hObject=0xa4) returned 1 [0199.244] AreFileApisANSI () returned 1 [0199.244] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0199.245] CloseHandle (hObject=0xa4) returned 1 [0199.245] AreFileApisANSI () returned 1 [0199.245] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0199.255] CloseHandle (hObject=0xa8) returned 1 [0199.255] AreFileApisANSI () returned 1 [0199.255] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0199.255] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2610, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0199.255] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0199.256] AreFileApisANSI () returned 1 [0199.256] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0199.257] CloseHandle (hObject=0xa4) returned 1 [0199.257] AreFileApisANSI () returned 1 [0199.257] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0199.258] CloseHandle (hObject=0xa4) returned 1 [0199.258] AreFileApisANSI () returned 1 [0199.258] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0199.260] CloseHandle (hObject=0xa4) returned 1 [0199.261] AreFileApisANSI () returned 1 [0199.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0199.261] CloseHandle (hObject=0xa4) returned 1 [0199.262] AreFileApisANSI () returned 1 [0199.262] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0199.262] CloseHandle (hObject=0xa4) returned 1 [0199.263] AreFileApisANSI () returned 1 [0199.263] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0199.272] CloseHandle (hObject=0xa4) returned 1 [0199.273] AreFileApisANSI () returned 1 [0199.273] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0199.274] CloseHandle (hObject=0xa0) returned 1 [0199.274] AreFileApisANSI () returned 1 [0199.274] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0199.275] CloseHandle (hObject=0xa0) returned 1 [0199.275] AreFileApisANSI () returned 1 [0199.275] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0199.276] CloseHandle (hObject=0xa0) returned 1 [0199.276] AreFileApisANSI () returned 1 [0199.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0199.278] CloseHandle (hObject=0xa4) returned 1 [0199.279] AreFileApisANSI () returned 1 [0199.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0199.279] CloseHandle (hObject=0xa4) returned 1 [0199.280] AreFileApisANSI () returned 1 [0199.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0199.281] CloseHandle (hObject=0xa4) returned 1 [0199.281] AreFileApisANSI () returned 1 [0199.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0199.282] CloseHandle (hObject=0xa8) returned 1 [0199.283] AreFileApisANSI () returned 1 [0199.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0199.284] CloseHandle (hObject=0xa8) returned 1 [0199.284] AreFileApisANSI () returned 1 [0199.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0199.286] CloseHandle (hObject=0xa8) returned 1 [0199.287] AreFileApisANSI () returned 1 [0199.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0199.288] CloseHandle (hObject=0xa8) returned 1 [0199.288] AreFileApisANSI () returned 1 [0199.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0199.289] CloseHandle (hObject=0xa8) returned 1 [0199.289] AreFileApisANSI () returned 1 [0199.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0199.301] CloseHandle (hObject=0xa8) returned 1 [0199.301] AreFileApisANSI () returned 1 [0199.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0199.302] CloseHandle (hObject=0xa8) returned 1 [0199.302] AreFileApisANSI () returned 1 [0199.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0199.303] CloseHandle (hObject=0xa8) returned 1 [0199.304] AreFileApisANSI () returned 1 [0199.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0199.307] CloseHandle (hObject=0xa8) returned 1 [0199.308] AreFileApisANSI () returned 1 [0199.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0199.309] CloseHandle (hObject=0xa8) returned 1 [0199.309] AreFileApisANSI () returned 1 [0199.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0199.310] CloseHandle (hObject=0xa8) returned 1 [0199.310] AreFileApisANSI () returned 1 [0199.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0199.312] CloseHandle (hObject=0xa8) returned 1 [0199.313] AreFileApisANSI () returned 1 [0199.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0199.314] CloseHandle (hObject=0xa4) returned 1 [0199.315] AreFileApisANSI () returned 1 [0199.315] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0199.316] CloseHandle (hObject=0xa4) returned 1 [0199.316] AreFileApisANSI () returned 1 [0199.316] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0199.318] CloseHandle (hObject=0xa4) returned 1 [0199.318] AreFileApisANSI () returned 1 [0199.318] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0199.320] CloseHandle (hObject=0xa4) returned 1 [0199.320] AreFileApisANSI () returned 1 [0199.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0199.322] CloseHandle (hObject=0xa4) returned 1 [0199.322] AreFileApisANSI () returned 1 [0199.322] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0199.325] CloseHandle (hObject=0xa4) returned 1 [0199.326] AreFileApisANSI () returned 1 [0199.326] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49be28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0199.327] CloseHandle (hObject=0xa4) returned 1 [0199.327] AreFileApisANSI () returned 1 [0199.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0199.328] CloseHandle (hObject=0xa4) returned 1 [0199.328] AreFileApisANSI () returned 1 [0199.328] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0199.330] CloseHandle (hObject=0xa4) returned 1 [0199.331] AreFileApisANSI () returned 1 [0199.331] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1a70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 192 [0199.333] CloseHandle (hObject=0xa4) returned 1 [0199.334] AreFileApisANSI () returned 1 [0199.334] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 189 [0199.334] CloseHandle (hObject=0xa4) returned 1 [0199.335] AreFileApisANSI () returned 1 [0199.335] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 192 [0199.336] CloseHandle (hObject=0xa4) returned 1 [0199.336] AreFileApisANSI () returned 1 [0199.336] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4969b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 208 [0199.339] CloseHandle (hObject=0xa8) returned 1 [0199.340] AreFileApisANSI () returned 1 [0199.340] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496070, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 205 [0199.341] CloseHandle (hObject=0xa8) returned 1 [0199.342] AreFileApisANSI () returned 1 [0199.342] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4962c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 208 [0199.343] CloseHandle (hObject=0xa8) returned 1 [0199.343] AreFileApisANSI () returned 1 [0199.343] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 207 [0199.361] CloseHandle (hObject=0xac) returned 1 [0199.362] AreFileApisANSI () returned 1 [0199.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 207 [0199.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x499a98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 216 [0199.362] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0199.363] AreFileApisANSI () returned 1 [0199.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0199.364] CloseHandle (hObject=0xa4) returned 1 [0199.365] AreFileApisANSI () returned 1 [0199.365] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0199.365] CloseHandle (hObject=0xa4) returned 1 [0199.366] AreFileApisANSI () returned 1 [0199.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0199.368] CloseHandle (hObject=0xa4) returned 1 [0199.368] AreFileApisANSI () returned 1 [0199.368] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0199.376] CloseHandle (hObject=0xa4) returned 1 [0199.377] AreFileApisANSI () returned 1 [0199.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0199.378] CloseHandle (hObject=0xa4) returned 1 [0199.378] AreFileApisANSI () returned 1 [0199.378] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0199.379] CloseHandle (hObject=0xa4) returned 1 [0199.380] AreFileApisANSI () returned 1 [0199.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0199.389] CloseHandle (hObject=0xa8) returned 1 [0199.389] AreFileApisANSI () returned 1 [0199.390] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0199.390] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2588, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0199.390] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0199.391] AreFileApisANSI () returned 1 [0199.391] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0199.392] CloseHandle (hObject=0xa4) returned 1 [0199.392] AreFileApisANSI () returned 1 [0199.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0199.393] CloseHandle (hObject=0xa4) returned 1 [0199.393] AreFileApisANSI () returned 1 [0199.393] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0199.395] CloseHandle (hObject=0xa4) returned 1 [0199.396] AreFileApisANSI () returned 1 [0199.396] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0199.397] CloseHandle (hObject=0xa4) returned 1 [0199.397] AreFileApisANSI () returned 1 [0199.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0199.398] CloseHandle (hObject=0xa4) returned 1 [0199.399] AreFileApisANSI () returned 1 [0199.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0199.401] CloseHandle (hObject=0xa4) returned 1 [0199.401] AreFileApisANSI () returned 1 [0199.401] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0199.404] GetFileType (hFile=0xa0) returned 0x1 [0199.404] CloseHandle (hObject=0xa0) returned 1 [0199.405] AreFileApisANSI () returned 1 [0199.405] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0199.406] CloseHandle (hObject=0xa0) returned 1 [0199.406] AreFileApisANSI () returned 1 [0199.406] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0199.407] CloseHandle (hObject=0xa0) returned 1 [0199.407] AreFileApisANSI () returned 1 [0199.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0199.414] CloseHandle (hObject=0xa4) returned 1 [0199.415] AreFileApisANSI () returned 1 [0199.415] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0199.416] CloseHandle (hObject=0xa4) returned 1 [0199.416] AreFileApisANSI () returned 1 [0199.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0199.417] CloseHandle (hObject=0xa4) returned 1 [0199.417] AreFileApisANSI () returned 1 [0199.417] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0199.419] CloseHandle (hObject=0xa8) returned 1 [0199.419] AreFileApisANSI () returned 1 [0199.419] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0199.420] CloseHandle (hObject=0xa8) returned 1 [0199.420] AreFileApisANSI () returned 1 [0199.420] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0199.434] CloseHandle (hObject=0xa8) returned 1 [0199.435] AreFileApisANSI () returned 1 [0199.435] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0199.436] CloseHandle (hObject=0xa8) returned 1 [0199.436] AreFileApisANSI () returned 1 [0199.436] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0199.437] CloseHandle (hObject=0xa8) returned 1 [0199.438] AreFileApisANSI () returned 1 [0199.438] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0199.440] CloseHandle (hObject=0xa8) returned 1 [0199.440] AreFileApisANSI () returned 1 [0199.440] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0199.441] CloseHandle (hObject=0xa8) returned 1 [0199.441] AreFileApisANSI () returned 1 [0199.442] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0199.442] CloseHandle (hObject=0xa8) returned 1 [0199.443] AreFileApisANSI () returned 1 [0199.443] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0199.450] CloseHandle (hObject=0xa8) returned 1 [0199.450] AreFileApisANSI () returned 1 [0199.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0199.451] CloseHandle (hObject=0xa8) returned 1 [0199.452] AreFileApisANSI () returned 1 [0199.452] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0199.453] CloseHandle (hObject=0xa8) returned 1 [0199.453] AreFileApisANSI () returned 1 [0199.453] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0199.455] CloseHandle (hObject=0xa8) returned 1 [0199.456] AreFileApisANSI () returned 1 [0199.456] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0199.457] CloseHandle (hObject=0xa4) returned 1 [0199.457] AreFileApisANSI () returned 1 [0199.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0199.458] CloseHandle (hObject=0xa4) returned 1 [0199.458] AreFileApisANSI () returned 1 [0199.458] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0199.460] CloseHandle (hObject=0xa4) returned 1 [0199.480] AreFileApisANSI () returned 1 [0199.480] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0199.482] CloseHandle (hObject=0xa4) returned 1 [0199.482] AreFileApisANSI () returned 1 [0199.482] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0199.483] CloseHandle (hObject=0xa4) returned 1 [0199.484] AreFileApisANSI () returned 1 [0199.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0199.485] CloseHandle (hObject=0xa4) returned 1 [0199.486] AreFileApisANSI () returned 1 [0199.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0199.487] CloseHandle (hObject=0xa4) returned 1 [0199.487] AreFileApisANSI () returned 1 [0199.487] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0199.488] CloseHandle (hObject=0xa4) returned 1 [0199.488] AreFileApisANSI () returned 1 [0199.488] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0199.499] CloseHandle (hObject=0xa4) returned 1 [0199.499] AreFileApisANSI () returned 1 [0199.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e6a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0199.501] CloseHandle (hObject=0xa4) returned 1 [0199.501] AreFileApisANSI () returned 1 [0199.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0199.503] CloseHandle (hObject=0xa4) returned 1 [0199.504] AreFileApisANSI () returned 1 [0199.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f120, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0199.505] CloseHandle (hObject=0xa4) returned 1 [0199.505] AreFileApisANSI () returned 1 [0199.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3cc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 168 [0199.508] GetFileType (hFile=0xa8) returned 0x1 [0199.509] CloseHandle (hObject=0xa8) returned 1 [0199.509] AreFileApisANSI () returned 1 [0199.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3fb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 165 [0199.510] CloseHandle (hObject=0xa8) returned 1 [0199.510] AreFileApisANSI () returned 1 [0199.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3bd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 168 [0199.511] CloseHandle (hObject=0xa8) returned 1 [0199.511] AreFileApisANSI () returned 1 [0199.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0199.593] CloseHandle (hObject=0xac) returned 1 [0199.593] AreFileApisANSI () returned 1 [0199.593] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0199.593] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a05a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 176 [0199.594] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0199.595] AreFileApisANSI () returned 1 [0199.595] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0199.596] CloseHandle (hObject=0xa4) returned 1 [0199.596] AreFileApisANSI () returned 1 [0199.596] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0199.598] CloseHandle (hObject=0xa4) returned 1 [0199.598] AreFileApisANSI () returned 1 [0199.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0199.600] CloseHandle (hObject=0xa4) returned 1 [0199.601] AreFileApisANSI () returned 1 [0199.601] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0199.601] GetFileType (hFile=0xa4) returned 0x1 [0199.602] CloseHandle (hObject=0xa4) returned 1 [0199.602] AreFileApisANSI () returned 1 [0199.602] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0199.609] CloseHandle (hObject=0xa4) returned 1 [0199.610] AreFileApisANSI () returned 1 [0199.610] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0199.611] CloseHandle (hObject=0xa4) returned 1 [0199.611] AreFileApisANSI () returned 1 [0199.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0199.621] CloseHandle (hObject=0xa8) returned 1 [0199.621] AreFileApisANSI () returned 1 [0199.621] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0199.622] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0199.622] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0199.623] AreFileApisANSI () returned 1 [0199.623] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0199.624] CloseHandle (hObject=0xa4) returned 1 [0199.624] AreFileApisANSI () returned 1 [0199.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0199.625] CloseHandle (hObject=0xa4) returned 1 [0199.625] AreFileApisANSI () returned 1 [0199.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0199.627] CloseHandle (hObject=0xa4) returned 1 [0199.627] AreFileApisANSI () returned 1 [0199.627] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0199.628] CloseHandle (hObject=0xa4) returned 1 [0199.629] AreFileApisANSI () returned 1 [0199.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0199.630] CloseHandle (hObject=0xa4) returned 1 [0199.630] AreFileApisANSI () returned 1 [0199.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0199.632] CloseHandle (hObject=0xa4) returned 1 [0199.633] AreFileApisANSI () returned 1 [0199.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0199.652] GetFileType (hFile=0xa0) returned 0x1 [0199.653] CloseHandle (hObject=0xa0) returned 1 [0199.654] AreFileApisANSI () returned 1 [0199.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0199.655] CloseHandle (hObject=0xa0) returned 1 [0199.656] AreFileApisANSI () returned 1 [0199.656] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0199.657] CloseHandle (hObject=0xa0) returned 1 [0199.658] AreFileApisANSI () returned 1 [0199.658] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0199.667] CloseHandle (hObject=0xa4) returned 1 [0199.668] AreFileApisANSI () returned 1 [0199.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0199.669] CloseHandle (hObject=0xa4) returned 1 [0199.669] AreFileApisANSI () returned 1 [0199.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0199.670] CloseHandle (hObject=0xa4) returned 1 [0199.671] AreFileApisANSI () returned 1 [0199.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0199.673] CloseHandle (hObject=0xa8) returned 1 [0199.673] AreFileApisANSI () returned 1 [0199.673] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0199.674] CloseHandle (hObject=0xa8) returned 1 [0199.675] AreFileApisANSI () returned 1 [0199.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0199.712] CloseHandle (hObject=0xa8) returned 1 [0199.712] AreFileApisANSI () returned 1 [0199.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0199.713] CloseHandle (hObject=0xa8) returned 1 [0199.714] AreFileApisANSI () returned 1 [0199.714] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0199.715] CloseHandle (hObject=0xa8) returned 1 [0199.715] AreFileApisANSI () returned 1 [0199.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0199.718] CloseHandle (hObject=0xa8) returned 1 [0199.718] AreFileApisANSI () returned 1 [0199.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0199.720] CloseHandle (hObject=0xa8) returned 1 [0199.720] AreFileApisANSI () returned 1 [0199.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0199.721] CloseHandle (hObject=0xa8) returned 1 [0199.722] AreFileApisANSI () returned 1 [0199.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0199.724] CloseHandle (hObject=0xa8) returned 1 [0199.725] AreFileApisANSI () returned 1 [0199.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0199.726] CloseHandle (hObject=0xa8) returned 1 [0199.726] AreFileApisANSI () returned 1 [0199.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0199.727] CloseHandle (hObject=0xa8) returned 1 [0199.728] AreFileApisANSI () returned 1 [0199.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0199.748] CloseHandle (hObject=0xa8) returned 1 [0199.748] AreFileApisANSI () returned 1 [0199.748] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0199.749] CloseHandle (hObject=0xa4) returned 1 [0199.751] AreFileApisANSI () returned 1 [0199.751] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0199.752] CloseHandle (hObject=0xa4) returned 1 [0199.752] AreFileApisANSI () returned 1 [0199.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0199.755] CloseHandle (hObject=0xa4) returned 1 [0199.755] AreFileApisANSI () returned 1 [0199.755] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0199.757] CloseHandle (hObject=0xa4) returned 1 [0199.757] AreFileApisANSI () returned 1 [0199.757] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0199.758] CloseHandle (hObject=0xa4) returned 1 [0199.759] AreFileApisANSI () returned 1 [0199.759] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0199.761] CloseHandle (hObject=0xa4) returned 1 [0199.762] AreFileApisANSI () returned 1 [0199.762] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0199.763] CloseHandle (hObject=0xa4) returned 1 [0199.763] AreFileApisANSI () returned 1 [0199.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0199.764] CloseHandle (hObject=0xa4) returned 1 [0199.765] AreFileApisANSI () returned 1 [0199.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0199.767] CloseHandle (hObject=0xa4) returned 1 [0199.767] AreFileApisANSI () returned 1 [0199.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f3c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0199.769] CloseHandle (hObject=0xa4) returned 1 [0199.770] AreFileApisANSI () returned 1 [0199.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49eb00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 149 [0199.780] CloseHandle (hObject=0xa4) returned 1 [0199.780] AreFileApisANSI () returned 1 [0199.780] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ea20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0199.781] CloseHandle (hObject=0xa4) returned 1 [0199.782] AreFileApisANSI () returned 1 [0199.782] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3ad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 168 [0199.801] GetFileType (hFile=0xa8) returned 0x1 [0199.802] CloseHandle (hObject=0xa8) returned 1 [0199.803] AreFileApisANSI () returned 1 [0199.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a41a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 165 [0199.804] CloseHandle (hObject=0xa8) returned 1 [0199.804] AreFileApisANSI () returned 1 [0199.804] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a36f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 168 [0199.805] CloseHandle (hObject=0xa8) returned 1 [0199.805] AreFileApisANSI () returned 1 [0199.805] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0199.890] CloseHandle (hObject=0xac) returned 1 [0199.891] AreFileApisANSI () returned 1 [0199.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 167 [0199.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0c20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 176 [0199.891] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0199.892] AreFileApisANSI () returned 1 [0199.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0199.893] CloseHandle (hObject=0xa4) returned 1 [0199.893] AreFileApisANSI () returned 1 [0199.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0199.893] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RoamingState\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\roamingstate\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0199.894] GetFileType (hFile=0xa4) returned 0x1 [0199.894] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0199.895] CloseHandle (hObject=0xa4) returned 1 [0199.895] AreFileApisANSI () returned 1 [0199.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0199.895] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RoamingState\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\roamingstate\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0199.905] GetFileType (hFile=0xa4) returned 0x1 [0199.906] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0199.906] CloseHandle (hObject=0xa4) returned 1 [0199.906] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x494960 [0199.907] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0199.907] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0199.907] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0199.907] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0199.907] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0 [0199.907] FindClose (in: hFindFile=0x494960 | out: hFindFile=0x494960) returned 1 [0199.907] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0199.907] AreFileApisANSI () returned 1 [0199.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0199.907] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0199.908] GetFileType (hFile=0xa4) returned 0x1 [0199.908] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0199.909] CloseHandle (hObject=0xa4) returned 1 [0199.909] AreFileApisANSI () returned 1 [0199.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0199.909] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0199.911] GetFileType (hFile=0xa4) returned 0x1 [0199.911] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0199.911] CloseHandle (hObject=0xa4) returned 1 [0199.912] AreFileApisANSI () returned 1 [0199.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0199.912] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0199.912] GetFileType (hFile=0xa4) returned 0x1 [0199.912] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0199.913] CloseHandle (hObject=0xa4) returned 1 [0199.913] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x494ea0 [0199.914] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0199.914] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0199.914] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0199.914] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0199.914] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0199.914] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0199.914] AreFileApisANSI () returned 1 [0199.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0199.914] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa18, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0199.914] GetFileType (hFile=0xa8) returned 0x1 [0199.914] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac8 | out: lpNewFilePointer=0x0) returned 1 [0199.914] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa7c | out: lpNewFilePointer=0x0) returned 1 [0199.915] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaac | out: lpNewFilePointer=0x0) returned 1 [0199.915] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.915] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.915] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaac | out: lpNewFilePointer=0x0) returned 1 [0199.915] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.915] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.915] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.916] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.917] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.917] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.917] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.917] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.917] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.917] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.917] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.917] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.917] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.917] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.917] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.917] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.918] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.918] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.918] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.918] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.918] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.918] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.918] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.918] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.918] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.918] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.918] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.918] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.919] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.919] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.919] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.919] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.919] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.919] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.919] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.919] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.919] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.919] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.919] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.919] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.919] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.920] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.920] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.920] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.920] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.920] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.920] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.920] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.920] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.920] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.920] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.920] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.920] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.920] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.920] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.921] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.921] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.921] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.921] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.921] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.921] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.921] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.921] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.921] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.921] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.921] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.921] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.921] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.922] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.922] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.922] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.922] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.922] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.922] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.922] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.922] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.922] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.922] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.922] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.922] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.922] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.923] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.923] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.923] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.923] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.923] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.923] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.923] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.923] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.923] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.923] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.923] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.923] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.923] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.923] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.924] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.924] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.924] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.924] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.924] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.924] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.924] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.924] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.924] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.924] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.925] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.925] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.925] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.925] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.925] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.925] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.925] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.925] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.925] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.925] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.925] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.925] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.925] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.926] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.926] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.926] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.926] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.926] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.926] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.926] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.926] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.926] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.926] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.926] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.926] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.926] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.926] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.927] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.927] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.927] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.927] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.927] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.927] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.927] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.927] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.927] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.927] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.927] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.927] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.927] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.927] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.928] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.928] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.928] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.928] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.928] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.928] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.928] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.928] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.928] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.928] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.928] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.928] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.928] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.929] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.929] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.929] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.929] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.929] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.929] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.929] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.929] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.929] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.929] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.929] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.929] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.929] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.929] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.930] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.930] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.930] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.930] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.930] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.930] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.930] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.930] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.930] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.930] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.930] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.930] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.930] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.930] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.931] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.931] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.931] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.931] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.931] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.931] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.931] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.931] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.931] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.931] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.931] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.931] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.931] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.931] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.932] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.932] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.932] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.932] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.932] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.932] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.932] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.932] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.932] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.932] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.932] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.932] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.932] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.932] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.933] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.933] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.933] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.933] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.933] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.933] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.933] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.933] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.933] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.933] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.933] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.933] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.933] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.934] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.934] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.934] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.934] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.934] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.934] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.934] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.934] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.934] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.934] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.934] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.934] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.934] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.934] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.935] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.935] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.935] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.935] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.935] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.935] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.935] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.935] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.935] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.935] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.935] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.935] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.935] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.935] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.936] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.936] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.936] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.936] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.936] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.936] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.936] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.936] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.936] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.936] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.936] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.936] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.936] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.936] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.937] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.937] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.937] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.937] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.937] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.937] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.937] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.937] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.937] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.937] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.937] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.937] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.937] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.938] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.938] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.938] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.938] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.938] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.938] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.938] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.938] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.938] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.938] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.938] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.938] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0199.938] WriteFile (in: hFile=0xa8, lpBuffer=0x4add60*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0199.938] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0199.939] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0199.939] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0199.939] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0199.939] ReadFile (in: hFile=0xa8, lpBuffer=0x4add60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4add60*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0199.939] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0199.939] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0199.939] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0199.946] CloseHandle (hObject=0xa8) returned 1 [0199.947] AreFileApisANSI () returned 1 [0199.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0199.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4938d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0199.947] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0199.948] AreFileApisANSI () returned 1 [0199.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0199.949] CloseHandle (hObject=0xa4) returned 1 [0199.950] AreFileApisANSI () returned 1 [0199.950] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0199.951] CloseHandle (hObject=0xa4) returned 1 [0199.951] AreFileApisANSI () returned 1 [0199.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0199.960] CloseHandle (hObject=0xa4) returned 1 [0199.961] AreFileApisANSI () returned 1 [0199.961] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0199.961] CloseHandle (hObject=0xa4) returned 1 [0199.962] AreFileApisANSI () returned 1 [0199.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0199.963] CloseHandle (hObject=0xa4) returned 1 [0199.963] AreFileApisANSI () returned 1 [0199.963] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0199.999] CloseHandle (hObject=0xa4) returned 1 [0200.009] AreFileApisANSI () returned 1 [0200.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0200.068] GetFileType (hFile=0xa0) returned 0x1 [0200.069] CloseHandle (hObject=0xa0) returned 1 [0200.070] AreFileApisANSI () returned 1 [0200.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0200.070] CloseHandle (hObject=0xa0) returned 1 [0200.071] AreFileApisANSI () returned 1 [0200.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0200.072] CloseHandle (hObject=0xa0) returned 1 [0200.072] AreFileApisANSI () returned 1 [0200.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0200.115] CloseHandle (hObject=0xa4) returned 1 [0200.115] AreFileApisANSI () returned 1 [0200.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0200.116] CloseHandle (hObject=0xa4) returned 1 [0200.116] AreFileApisANSI () returned 1 [0200.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0200.117] CloseHandle (hObject=0xa4) returned 1 [0200.117] AreFileApisANSI () returned 1 [0200.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0200.118] CloseHandle (hObject=0xa8) returned 1 [0200.119] AreFileApisANSI () returned 1 [0200.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0200.119] CloseHandle (hObject=0xa8) returned 1 [0200.120] AreFileApisANSI () returned 1 [0200.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0200.213] CloseHandle (hObject=0xa8) returned 1 [0200.215] AreFileApisANSI () returned 1 [0200.215] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0200.216] CloseHandle (hObject=0xa8) returned 1 [0200.216] AreFileApisANSI () returned 1 [0200.216] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0200.217] CloseHandle (hObject=0xa8) returned 1 [0200.217] AreFileApisANSI () returned 1 [0200.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0200.306] CloseHandle (hObject=0xa8) returned 1 [0200.306] AreFileApisANSI () returned 1 [0200.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0200.308] CloseHandle (hObject=0xa8) returned 1 [0200.308] AreFileApisANSI () returned 1 [0200.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0200.309] CloseHandle (hObject=0xa8) returned 1 [0200.309] AreFileApisANSI () returned 1 [0200.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0200.311] CloseHandle (hObject=0xa8) returned 1 [0200.311] AreFileApisANSI () returned 1 [0200.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0200.313] CloseHandle (hObject=0xa8) returned 1 [0200.313] AreFileApisANSI () returned 1 [0200.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0200.314] CloseHandle (hObject=0xa8) returned 1 [0200.314] AreFileApisANSI () returned 1 [0200.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0200.395] CloseHandle (hObject=0xa8) returned 1 [0200.395] AreFileApisANSI () returned 1 [0200.396] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0200.396] CloseHandle (hObject=0xa4) returned 1 [0200.397] AreFileApisANSI () returned 1 [0200.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0200.398] CloseHandle (hObject=0xa4) returned 1 [0200.399] AreFileApisANSI () returned 1 [0200.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0200.488] CloseHandle (hObject=0xa4) returned 1 [0200.488] AreFileApisANSI () returned 1 [0200.488] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0200.489] CloseHandle (hObject=0xa4) returned 1 [0200.490] AreFileApisANSI () returned 1 [0200.490] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0200.490] CloseHandle (hObject=0xa4) returned 1 [0200.491] AreFileApisANSI () returned 1 [0200.491] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0200.493] CloseHandle (hObject=0xa4) returned 1 [0200.493] AreFileApisANSI () returned 1 [0200.493] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0200.494] CloseHandle (hObject=0xa4) returned 1 [0200.494] AreFileApisANSI () returned 1 [0200.494] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0200.495] CloseHandle (hObject=0xa4) returned 1 [0200.495] AreFileApisANSI () returned 1 [0200.495] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0200.497] CloseHandle (hObject=0xa4) returned 1 [0200.498] AreFileApisANSI () returned 1 [0200.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0200.498] CloseHandle (hObject=0xa4) returned 1 [0200.499] AreFileApisANSI () returned 1 [0200.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0200.500] CloseHandle (hObject=0xa4) returned 1 [0200.500] AreFileApisANSI () returned 1 [0200.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0200.529] CloseHandle (hObject=0xa4) returned 1 [0200.530] AreFileApisANSI () returned 1 [0200.530] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0200.533] CloseHandle (hObject=0xa4) returned 1 [0200.533] AreFileApisANSI () returned 1 [0200.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0200.534] CloseHandle (hObject=0xa4) returned 1 [0200.535] AreFileApisANSI () returned 1 [0200.535] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0200.536] CloseHandle (hObject=0xa4) returned 1 [0200.536] AreFileApisANSI () returned 1 [0200.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0200.598] CloseHandle (hObject=0xa8) returned 1 [0200.599] AreFileApisANSI () returned 1 [0200.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0200.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2610, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0200.599] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0200.600] AreFileApisANSI () returned 1 [0200.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0200.601] CloseHandle (hObject=0xa4) returned 1 [0200.601] AreFileApisANSI () returned 1 [0200.601] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0200.602] CloseHandle (hObject=0xa4) returned 1 [0200.602] AreFileApisANSI () returned 1 [0200.602] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0200.604] CloseHandle (hObject=0xa4) returned 1 [0200.604] AreFileApisANSI () returned 1 [0200.604] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0200.605] CloseHandle (hObject=0xa4) returned 1 [0200.605] AreFileApisANSI () returned 1 [0200.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0200.606] CloseHandle (hObject=0xa4) returned 1 [0200.606] AreFileApisANSI () returned 1 [0200.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0200.639] CloseHandle (hObject=0xa4) returned 1 [0200.640] AreFileApisANSI () returned 1 [0200.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a39e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 174 [0200.642] CloseHandle (hObject=0xa4) returned 1 [0200.643] AreFileApisANSI () returned 1 [0200.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a39e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 171 [0200.644] CloseHandle (hObject=0xa4) returned 1 [0200.644] AreFileApisANSI () returned 1 [0200.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a37f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 174 [0200.645] CloseHandle (hObject=0xa4) returned 1 [0200.645] AreFileApisANSI () returned 1 [0200.645] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1ca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 190 [0200.648] CloseHandle (hObject=0xa8) returned 1 [0200.649] AreFileApisANSI () returned 1 [0200.649] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2100, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 187 [0200.650] CloseHandle (hObject=0xa8) returned 1 [0200.650] AreFileApisANSI () returned 1 [0200.650] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1fe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 190 [0200.651] CloseHandle (hObject=0xa8) returned 1 [0200.652] AreFileApisANSI () returned 1 [0200.652] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 189 [0200.670] CloseHandle (hObject=0xac) returned 1 [0200.670] AreFileApisANSI () returned 1 [0200.670] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 189 [0200.670] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a64b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 198 [0200.671] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0200.672] AreFileApisANSI () returned 1 [0200.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0200.674] GetFileType (hFile=0xa0) returned 0x1 [0200.675] WriteFile (in: hFile=0xa0, lpBuffer=0x3da060*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3da058, lpOverlapped=0x0 | out: lpBuffer=0x3da060*, lpNumberOfBytesWritten=0x3da058*=0x423, lpOverlapped=0x0) returned 1 [0200.676] CloseHandle (hObject=0xa0) returned 1 [0200.676] AreFileApisANSI () returned 1 [0200.676] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0200.676] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3db3b4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa0 [0200.677] GetFileType (hFile=0xa0) returned 0x1 [0200.677] WriteFile (in: hFile=0xa0, lpBuffer=0x3da060*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3da058, lpOverlapped=0x0 | out: lpBuffer=0x3da060*, lpNumberOfBytesWritten=0x3da058*=0x423, lpOverlapped=0x0) returned 1 [0200.678] CloseHandle (hObject=0xa0) returned 1 [0200.678] AreFileApisANSI () returned 1 [0200.678] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0200.678] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3db3b4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa0 [0200.679] GetFileType (hFile=0xa0) returned 0x1 [0200.679] WriteFile (in: hFile=0xa0, lpBuffer=0x3da060*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3da058, lpOverlapped=0x0 | out: lpBuffer=0x3da060*, lpNumberOfBytesWritten=0x3da058*=0x423, lpOverlapped=0x0) returned 1 [0200.680] CloseHandle (hObject=0xa0) returned 1 [0200.680] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\*", lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 0x494f60 [0200.680] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0200.680] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0200.680] AreFileApisANSI () returned 1 [0200.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0200.680] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\ac\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0200.682] GetFileType (hFile=0xa4) returned 0x1 [0200.682] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0200.682] CloseHandle (hObject=0xa4) returned 1 [0200.683] AreFileApisANSI () returned 1 [0200.683] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0200.683] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\ac\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0200.683] GetFileType (hFile=0xa4) returned 0x1 [0200.684] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0200.684] CloseHandle (hObject=0xa4) returned 1 [0200.685] AreFileApisANSI () returned 1 [0200.685] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0200.685] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\ac\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0200.758] GetFileType (hFile=0xa4) returned 0x1 [0200.758] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0200.759] CloseHandle (hObject=0xa4) returned 1 [0200.759] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x494e60 [0200.760] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0200.760] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0200.760] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0200.760] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0200.760] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0 [0200.760] FindClose (in: hFindFile=0x494e60 | out: hFindFile=0x494e60) returned 1 [0200.760] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0200.760] AreFileApisANSI () returned 1 [0200.760] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0200.760] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\appdata\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0200.761] GetFileType (hFile=0xa4) returned 0x1 [0200.762] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0200.762] CloseHandle (hObject=0xa4) returned 1 [0200.763] AreFileApisANSI () returned 1 [0200.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0200.763] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\appdata\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0200.763] GetFileType (hFile=0xa4) returned 0x1 [0200.763] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0200.764] CloseHandle (hObject=0xa4) returned 1 [0200.764] AreFileApisANSI () returned 1 [0200.764] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0200.764] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\appdata\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0200.766] GetFileType (hFile=0xa4) returned 0x1 [0200.766] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0200.766] CloseHandle (hObject=0xa4) returned 1 [0200.767] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x494be0 [0200.767] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0200.767] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0200.767] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0200.767] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0200.767] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0 [0200.767] FindClose (in: hFindFile=0x494be0 | out: hFindFile=0x494be0) returned 1 [0200.767] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0200.767] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0200.767] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0200.768] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0200.768] AreFileApisANSI () returned 1 [0200.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0200.768] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\localcache\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0200.768] GetFileType (hFile=0xa4) returned 0x1 [0200.769] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0200.769] CloseHandle (hObject=0xa4) returned 1 [0200.770] AreFileApisANSI () returned 1 [0200.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0200.770] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\localcache\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0200.770] GetFileType (hFile=0xa4) returned 0x1 [0200.770] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0200.771] CloseHandle (hObject=0xa4) returned 1 [0200.771] AreFileApisANSI () returned 1 [0200.771] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0200.771] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\localcache\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0200.860] GetFileType (hFile=0xa4) returned 0x1 [0200.860] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0200.861] CloseHandle (hObject=0xa4) returned 1 [0200.862] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x494ce0 [0200.862] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0200.862] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0200.862] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0200.862] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0200.862] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0 [0200.862] FindClose (in: hFindFile=0x494ce0 | out: hFindFile=0x494ce0) returned 1 [0200.863] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0200.863] AreFileApisANSI () returned 1 [0200.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0200.863] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\localstate\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0200.864] GetFileType (hFile=0xa4) returned 0x1 [0200.865] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0200.865] CloseHandle (hObject=0xa4) returned 1 [0200.866] AreFileApisANSI () returned 1 [0200.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0200.866] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\localstate\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0200.867] GetFileType (hFile=0xa4) returned 0x1 [0200.867] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0200.869] CloseHandle (hObject=0xa4) returned 1 [0200.869] AreFileApisANSI () returned 1 [0200.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0200.869] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\localstate\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0200.871] GetFileType (hFile=0xa4) returned 0x1 [0200.871] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0200.872] CloseHandle (hObject=0xa4) returned 1 [0200.872] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x494ba0 [0200.872] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0200.872] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0200.872] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0200.872] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0200.872] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0 [0200.872] FindClose (in: hFindFile=0x494ba0 | out: hFindFile=0x494ba0) returned 1 [0200.873] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0200.873] AreFileApisANSI () returned 1 [0200.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0200.873] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\roamingstate\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0200.874] GetFileType (hFile=0xa4) returned 0x1 [0200.874] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0200.875] CloseHandle (hObject=0xa4) returned 1 [0200.875] AreFileApisANSI () returned 1 [0200.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0200.875] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\roamingstate\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0200.876] GetFileType (hFile=0xa4) returned 0x1 [0200.876] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0200.876] CloseHandle (hObject=0xa4) returned 1 [0200.877] AreFileApisANSI () returned 1 [0200.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0200.877] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\roamingstate\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0201.016] GetFileType (hFile=0xa4) returned 0x1 [0201.016] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0201.017] CloseHandle (hObject=0xa4) returned 1 [0201.017] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x4949e0 [0201.018] FindNextFileA (in: hFindFile=0x4949e0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0201.018] FindNextFileA (in: hFindFile=0x4949e0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0201.018] FindNextFileA (in: hFindFile=0x4949e0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0201.018] FindNextFileA (in: hFindFile=0x4949e0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0201.018] FindNextFileA (in: hFindFile=0x4949e0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0 [0201.018] FindClose (in: hFindFile=0x4949e0 | out: hFindFile=0x4949e0) returned 1 [0201.019] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0201.019] AreFileApisANSI () returned 1 [0201.019] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0201.019] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0201.019] GetFileType (hFile=0xa4) returned 0x1 [0201.019] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0201.020] CloseHandle (hObject=0xa4) returned 1 [0201.020] AreFileApisANSI () returned 1 [0201.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0201.020] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0201.022] GetFileType (hFile=0xa4) returned 0x1 [0201.022] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0201.023] CloseHandle (hObject=0xa4) returned 1 [0201.023] AreFileApisANSI () returned 1 [0201.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0201.023] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0201.024] GetFileType (hFile=0xa4) returned 0x1 [0201.024] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0201.025] CloseHandle (hObject=0xa4) returned 1 [0201.025] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x4948a0 [0201.025] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0201.025] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0201.025] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0201.025] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0201.025] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0201.025] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0201.026] AreFileApisANSI () returned 1 [0201.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0201.026] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa18, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0201.026] GetFileType (hFile=0xa8) returned 0x1 [0201.026] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac8 | out: lpNewFilePointer=0x0) returned 1 [0201.026] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa7c | out: lpNewFilePointer=0x0) returned 1 [0201.027] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaac | out: lpNewFilePointer=0x0) returned 1 [0201.027] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.027] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.027] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaac | out: lpNewFilePointer=0x0) returned 1 [0201.027] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.027] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.027] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.166] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.371] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.371] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.372] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.372] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.372] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.372] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.372] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.372] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.372] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.372] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.372] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.372] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.373] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.373] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.373] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.373] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.373] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.373] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.373] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.373] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.373] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.373] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.373] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.373] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.373] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.374] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.374] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.374] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.374] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.374] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.374] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.374] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.374] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.374] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.374] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.374] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.374] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.375] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.375] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.375] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.375] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.375] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.375] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.375] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.375] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.375] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.375] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.375] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.376] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.376] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.376] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.376] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.376] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.376] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.376] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.376] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.376] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.376] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.376] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.376] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.377] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.377] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.377] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.377] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.565] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.565] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.565] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.565] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.565] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.565] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.565] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.565] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.566] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.566] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.566] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.566] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.566] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.566] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.566] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.566] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.566] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.566] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.566] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.566] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.566] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.567] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.567] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.567] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.567] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.567] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.567] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.567] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.567] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.567] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.567] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.567] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.567] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.568] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.568] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.568] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.568] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.568] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.568] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.568] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.568] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.568] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.568] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.568] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.569] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.569] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.569] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.569] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.569] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.569] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.569] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.569] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.569] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.805] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.805] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.805] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.805] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.805] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.805] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.805] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.805] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.805] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.805] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.806] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.806] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.806] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.806] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.806] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.806] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.806] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.806] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.806] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.806] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.806] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.806] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.806] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.807] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.807] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.807] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.807] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.807] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.807] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.808] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.808] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.808] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.808] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.809] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.809] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.809] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.809] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.809] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.810] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.810] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.810] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.810] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.811] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.811] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.811] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.812] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.812] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.812] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.812] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.812] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.812] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.857] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.857] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.857] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.857] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.858] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.858] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.858] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.858] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.858] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.858] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.858] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.858] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.858] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.858] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.858] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.859] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.859] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.859] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.859] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.859] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.859] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.859] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.859] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.859] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.859] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.859] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.859] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.859] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.860] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.860] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.860] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.860] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.860] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.860] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.881] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.882] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.882] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.882] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.882] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.882] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.882] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.882] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.882] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.882] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.882] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.882] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.882] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.883] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.883] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.883] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.883] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.883] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.883] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.883] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.883] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.883] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.883] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.883] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.883] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.883] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.884] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.884] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.884] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.884] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.884] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.884] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.884] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.884] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.884] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.884] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.884] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.884] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.885] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.885] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.885] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.885] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.885] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.885] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.885] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.885] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.885] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.885] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.885] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.885] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.886] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.886] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.886] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.886] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.886] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.886] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.886] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.886] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.886] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.886] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.886] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.886] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.887] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.887] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.887] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.887] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.887] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.887] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.887] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.887] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa78 | out: lpNewFilePointer=0x0) returned 1 [0201.887] WriteFile (in: hFile=0xa8, lpBuffer=0x4abd50*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesWritten=0x3daa44*=0x8, lpOverlapped=0x0) returned 1 [0201.887] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daaa0 | out: lpNewFilePointer=0x0) returned 1 [0201.887] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa34 | out: lpNewFilePointer=0x0) returned 1 [0201.888] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab0 | out: lpNewFilePointer=0x0) returned 1 [0201.888] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa64 | out: lpNewFilePointer=0x0) returned 1 [0201.888] ReadFile (in: hFile=0xa8, lpBuffer=0x4abd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3daa44, lpOverlapped=0x0 | out: lpBuffer=0x4abd50*, lpNumberOfBytesRead=0x3daa44*=0x1000, lpOverlapped=0x0) returned 1 [0201.888] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daab4 | out: lpNewFilePointer=0x0) returned 1 [0201.888] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3daa48 | out: lpNewFilePointer=0x0) returned 1 [0201.888] SetFilePointerEx (in: hFile=0xa8, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3daac4 | out: lpNewFilePointer=0x0) returned 1 [0201.900] CloseHandle (hObject=0xa8) returned 1 [0201.901] AreFileApisANSI () returned 1 [0201.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0201.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493c18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0201.901] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0201.902] AreFileApisANSI () returned 1 [0201.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0201.903] CloseHandle (hObject=0xa4) returned 1 [0201.903] AreFileApisANSI () returned 1 [0201.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0201.905] CloseHandle (hObject=0xa4) returned 1 [0201.905] AreFileApisANSI () returned 1 [0201.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0201.960] CloseHandle (hObject=0xa4) returned 1 [0201.960] AreFileApisANSI () returned 1 [0201.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0201.961] CloseHandle (hObject=0xa4) returned 1 [0201.962] AreFileApisANSI () returned 1 [0201.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0201.963] CloseHandle (hObject=0xa4) returned 1 [0201.963] AreFileApisANSI () returned 1 [0201.964] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0201.966] CloseHandle (hObject=0xa4) returned 1 [0201.968] AreFileApisANSI () returned 1 [0201.968] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0201.969] CloseHandle (hObject=0xa0) returned 1 [0201.970] AreFileApisANSI () returned 1 [0201.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0201.971] CloseHandle (hObject=0xa0) returned 1 [0201.971] AreFileApisANSI () returned 1 [0201.971] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0201.972] CloseHandle (hObject=0xa0) returned 1 [0201.973] AreFileApisANSI () returned 1 [0201.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0201.974] CloseHandle (hObject=0xa4) returned 1 [0201.975] AreFileApisANSI () returned 1 [0201.975] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0201.976] CloseHandle (hObject=0xa4) returned 1 [0201.977] AreFileApisANSI () returned 1 [0201.977] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0201.988] CloseHandle (hObject=0xa4) returned 1 [0201.989] AreFileApisANSI () returned 1 [0201.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0201.990] CloseHandle (hObject=0xa4) returned 1 [0201.991] AreFileApisANSI () returned 1 [0201.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0201.992] CloseHandle (hObject=0xa4) returned 1 [0201.992] AreFileApisANSI () returned 1 [0201.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0201.995] CloseHandle (hObject=0xa4) returned 1 [0201.995] AreFileApisANSI () returned 1 [0201.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0201.997] CloseHandle (hObject=0xa4) returned 1 [0201.998] AreFileApisANSI () returned 1 [0201.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0201.999] CloseHandle (hObject=0xa4) returned 1 [0202.000] AreFileApisANSI () returned 1 [0202.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0202.002] CloseHandle (hObject=0xa4) returned 1 [0202.003] AreFileApisANSI () returned 1 [0202.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0202.005] CloseHandle (hObject=0xa4) returned 1 [0202.006] AreFileApisANSI () returned 1 [0202.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0202.008] CloseHandle (hObject=0xa4) returned 1 [0202.008] AreFileApisANSI () returned 1 [0202.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0202.010] CloseHandle (hObject=0xa4) returned 1 [0202.010] AreFileApisANSI () returned 1 [0202.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0202.012] CloseHandle (hObject=0xa8) returned 1 [0202.012] AreFileApisANSI () returned 1 [0202.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0202.013] CloseHandle (hObject=0xa8) returned 1 [0202.014] AreFileApisANSI () returned 1 [0202.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ca88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0202.019] CloseHandle (hObject=0xa8) returned 1 [0202.020] AreFileApisANSI () returned 1 [0202.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 139 [0202.021] CloseHandle (hObject=0xac) returned 1 [0202.021] AreFileApisANSI () returned 1 [0202.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a55e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0202.022] CloseHandle (hObject=0xac) returned 1 [0202.023] AreFileApisANSI () returned 1 [0202.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 139 [0202.025] CloseHandle (hObject=0xac) returned 1 [0202.026] AreFileApisANSI () returned 1 [0202.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a56a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 145 [0202.031] CloseHandle (hObject=0xb0) returned 1 [0202.033] AreFileApisANSI () returned 1 [0202.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 142 [0202.034] CloseHandle (hObject=0xb0) returned 1 [0202.034] AreFileApisANSI () returned 1 [0202.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 145 [0202.036] CloseHandle (hObject=0xb0) returned 1 [0202.112] AreFileApisANSI () returned 1 [0202.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0202.113] CloseHandle (hObject=0xa4) returned 1 [0202.113] AreFileApisANSI () returned 1 [0202.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0202.115] CloseHandle (hObject=0xa4) returned 1 [0202.115] AreFileApisANSI () returned 1 [0202.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0202.117] CloseHandle (hObject=0xa4) returned 1 [0202.118] AreFileApisANSI () returned 1 [0202.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0202.122] CloseHandle (hObject=0xa4) returned 1 [0202.122] AreFileApisANSI () returned 1 [0202.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0202.124] CloseHandle (hObject=0xa4) returned 1 [0202.124] AreFileApisANSI () returned 1 [0202.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0202.126] CloseHandle (hObject=0xa4) returned 1 [0202.126] AreFileApisANSI () returned 1 [0202.126] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0202.139] CloseHandle (hObject=0xa8) returned 1 [0202.139] AreFileApisANSI () returned 1 [0202.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0202.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a32d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0202.139] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0202.141] AreFileApisANSI () returned 1 [0202.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0202.142] CloseHandle (hObject=0xa4) returned 1 [0202.142] AreFileApisANSI () returned 1 [0202.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0202.143] CloseHandle (hObject=0xa4) returned 1 [0202.144] AreFileApisANSI () returned 1 [0202.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0202.169] CloseHandle (hObject=0xa4) returned 1 [0202.170] AreFileApisANSI () returned 1 [0202.170] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0202.171] CloseHandle (hObject=0xa4) returned 1 [0202.172] AreFileApisANSI () returned 1 [0202.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0202.173] CloseHandle (hObject=0xa4) returned 1 [0202.173] AreFileApisANSI () returned 1 [0202.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0202.176] CloseHandle (hObject=0xa4) returned 1 [0202.176] AreFileApisANSI () returned 1 [0202.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0202.180] GetFileType (hFile=0xa0) returned 0x1 [0202.181] CloseHandle (hObject=0xa0) returned 1 [0202.181] AreFileApisANSI () returned 1 [0202.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0202.182] CloseHandle (hObject=0xa0) returned 1 [0202.183] AreFileApisANSI () returned 1 [0202.183] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0202.184] CloseHandle (hObject=0xa0) returned 1 [0202.185] AreFileApisANSI () returned 1 [0202.185] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0202.187] CloseHandle (hObject=0xa4) returned 1 [0202.187] AreFileApisANSI () returned 1 [0202.188] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0202.189] CloseHandle (hObject=0xa4) returned 1 [0202.189] AreFileApisANSI () returned 1 [0202.189] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0202.197] CloseHandle (hObject=0xa4) returned 1 [0202.197] AreFileApisANSI () returned 1 [0202.197] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0202.199] CloseHandle (hObject=0xa4) returned 1 [0202.200] AreFileApisANSI () returned 1 [0202.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0202.201] CloseHandle (hObject=0xa4) returned 1 [0202.202] AreFileApisANSI () returned 1 [0202.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0202.204] CloseHandle (hObject=0xa4) returned 1 [0202.205] AreFileApisANSI () returned 1 [0202.205] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0202.207] CloseHandle (hObject=0xa4) returned 1 [0202.208] AreFileApisANSI () returned 1 [0202.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0202.209] CloseHandle (hObject=0xa4) returned 1 [0202.210] AreFileApisANSI () returned 1 [0202.210] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0202.214] CloseHandle (hObject=0xa4) returned 1 [0202.214] AreFileApisANSI () returned 1 [0202.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0202.216] CloseHandle (hObject=0xa4) returned 1 [0202.217] AreFileApisANSI () returned 1 [0202.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0202.219] CloseHandle (hObject=0xa4) returned 1 [0202.219] AreFileApisANSI () returned 1 [0202.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0202.223] CloseHandle (hObject=0xa4) returned 1 [0202.223] AreFileApisANSI () returned 1 [0202.223] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0202.225] CloseHandle (hObject=0xa4) returned 1 [0202.226] AreFileApisANSI () returned 1 [0202.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0202.227] CloseHandle (hObject=0xa4) returned 1 [0202.228] AreFileApisANSI () returned 1 [0202.228] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0202.230] CloseHandle (hObject=0xa4) returned 1 [0202.231] AreFileApisANSI () returned 1 [0202.231] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0202.246] CloseHandle (hObject=0xa4) returned 1 [0202.247] AreFileApisANSI () returned 1 [0202.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0202.248] CloseHandle (hObject=0xa4) returned 1 [0202.249] AreFileApisANSI () returned 1 [0202.249] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0202.250] CloseHandle (hObject=0xa4) returned 1 [0202.251] AreFileApisANSI () returned 1 [0202.251] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0202.270] CloseHandle (hObject=0xa8) returned 1 [0202.271] AreFileApisANSI () returned 1 [0202.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0202.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493948, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0202.271] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0202.273] AreFileApisANSI () returned 1 [0202.273] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0202.274] CloseHandle (hObject=0xa4) returned 1 [0202.275] AreFileApisANSI () returned 1 [0202.275] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0202.276] CloseHandle (hObject=0xa4) returned 1 [0202.277] AreFileApisANSI () returned 1 [0202.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0202.279] CloseHandle (hObject=0xa4) returned 1 [0202.280] AreFileApisANSI () returned 1 [0202.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0202.281] CloseHandle (hObject=0xa4) returned 1 [0202.282] AreFileApisANSI () returned 1 [0202.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0202.283] CloseHandle (hObject=0xa4) returned 1 [0202.283] AreFileApisANSI () returned 1 [0202.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0202.302] CloseHandle (hObject=0xa4) returned 1 [0202.303] AreFileApisANSI () returned 1 [0202.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0202.324] CloseHandle (hObject=0xa0) returned 1 [0202.324] AreFileApisANSI () returned 1 [0202.324] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0202.327] CloseHandle (hObject=0xa0) returned 1 [0202.327] AreFileApisANSI () returned 1 [0202.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0202.329] CloseHandle (hObject=0xa0) returned 1 [0202.331] AreFileApisANSI () returned 1 [0202.331] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0202.333] CloseHandle (hObject=0xa4) returned 1 [0202.334] AreFileApisANSI () returned 1 [0202.334] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0202.335] CloseHandle (hObject=0xa4) returned 1 [0202.336] AreFileApisANSI () returned 1 [0202.336] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0202.390] CloseHandle (hObject=0xa4) returned 1 [0202.391] AreFileApisANSI () returned 1 [0202.391] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0202.393] CloseHandle (hObject=0xa4) returned 1 [0202.393] AreFileApisANSI () returned 1 [0202.393] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0202.395] CloseHandle (hObject=0xa4) returned 1 [0202.396] AreFileApisANSI () returned 1 [0202.396] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0202.398] CloseHandle (hObject=0xa4) returned 1 [0202.399] AreFileApisANSI () returned 1 [0202.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0202.400] CloseHandle (hObject=0xa4) returned 1 [0202.401] AreFileApisANSI () returned 1 [0202.401] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0202.402] CloseHandle (hObject=0xa4) returned 1 [0202.402] AreFileApisANSI () returned 1 [0202.402] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0202.405] CloseHandle (hObject=0xa4) returned 1 [0202.406] AreFileApisANSI () returned 1 [0202.406] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0202.407] CloseHandle (hObject=0xa4) returned 1 [0202.407] AreFileApisANSI () returned 1 [0202.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0202.409] CloseHandle (hObject=0xa4) returned 1 [0202.409] AreFileApisANSI () returned 1 [0202.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0202.424] CloseHandle (hObject=0xa4) returned 1 [0202.425] AreFileApisANSI () returned 1 [0202.425] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0202.427] CloseHandle (hObject=0xa4) returned 1 [0202.427] AreFileApisANSI () returned 1 [0202.427] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0202.429] CloseHandle (hObject=0xa4) returned 1 [0202.429] AreFileApisANSI () returned 1 [0202.429] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0202.432] CloseHandle (hObject=0xa4) returned 1 [0202.432] AreFileApisANSI () returned 1 [0202.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0202.461] CloseHandle (hObject=0xa4) returned 1 [0202.462] AreFileApisANSI () returned 1 [0202.462] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0202.463] CloseHandle (hObject=0xa4) returned 1 [0202.464] AreFileApisANSI () returned 1 [0202.464] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0202.465] CloseHandle (hObject=0xa4) returned 1 [0202.466] AreFileApisANSI () returned 1 [0202.466] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0202.499] CloseHandle (hObject=0xa8) returned 1 [0202.499] AreFileApisANSI () returned 1 [0202.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0202.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493d80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0202.499] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0202.501] AreFileApisANSI () returned 1 [0202.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0202.502] CloseHandle (hObject=0xa4) returned 1 [0202.502] AreFileApisANSI () returned 1 [0202.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0202.503] CloseHandle (hObject=0xa4) returned 1 [0202.503] AreFileApisANSI () returned 1 [0202.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0202.506] CloseHandle (hObject=0xa4) returned 1 [0202.507] AreFileApisANSI () returned 1 [0202.507] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0202.508] CloseHandle (hObject=0xa4) returned 1 [0202.509] AreFileApisANSI () returned 1 [0202.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0202.510] CloseHandle (hObject=0xa4) returned 1 [0202.510] AreFileApisANSI () returned 1 [0202.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0202.524] CloseHandle (hObject=0xa4) returned 1 [0202.525] AreFileApisANSI () returned 1 [0202.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0202.528] GetFileType (hFile=0xa0) returned 0x1 [0202.530] CloseHandle (hObject=0xa0) returned 1 [0202.530] AreFileApisANSI () returned 1 [0202.530] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0202.531] CloseHandle (hObject=0xa0) returned 1 [0202.532] AreFileApisANSI () returned 1 [0202.532] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0202.533] CloseHandle (hObject=0xa0) returned 1 [0202.533] AreFileApisANSI () returned 1 [0202.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0202.538] CloseHandle (hObject=0xa4) returned 1 [0202.539] AreFileApisANSI () returned 1 [0202.539] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0202.540] CloseHandle (hObject=0xa4) returned 1 [0202.540] AreFileApisANSI () returned 1 [0202.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0202.541] CloseHandle (hObject=0xa4) returned 1 [0202.542] AreFileApisANSI () returned 1 [0202.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0202.544] CloseHandle (hObject=0xa8) returned 1 [0202.545] AreFileApisANSI () returned 1 [0202.545] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0202.546] CloseHandle (hObject=0xa8) returned 1 [0202.546] AreFileApisANSI () returned 1 [0202.546] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0202.549] CloseHandle (hObject=0xa8) returned 1 [0202.550] AreFileApisANSI () returned 1 [0202.550] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0202.551] CloseHandle (hObject=0xa8) returned 1 [0202.552] AreFileApisANSI () returned 1 [0202.552] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0202.553] CloseHandle (hObject=0xa8) returned 1 [0202.553] AreFileApisANSI () returned 1 [0202.553] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0202.563] CloseHandle (hObject=0xa8) returned 1 [0202.563] AreFileApisANSI () returned 1 [0202.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0202.565] CloseHandle (hObject=0xa8) returned 1 [0202.565] AreFileApisANSI () returned 1 [0202.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0202.566] CloseHandle (hObject=0xa8) returned 1 [0202.566] AreFileApisANSI () returned 1 [0202.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0202.569] CloseHandle (hObject=0xa8) returned 1 [0202.569] AreFileApisANSI () returned 1 [0202.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0202.570] CloseHandle (hObject=0xa8) returned 1 [0202.571] AreFileApisANSI () returned 1 [0202.571] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0202.572] CloseHandle (hObject=0xa8) returned 1 [0202.572] AreFileApisANSI () returned 1 [0202.572] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0202.574] CloseHandle (hObject=0xa8) returned 1 [0202.575] AreFileApisANSI () returned 1 [0202.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0202.576] CloseHandle (hObject=0xa4) returned 1 [0202.577] AreFileApisANSI () returned 1 [0202.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0202.578] CloseHandle (hObject=0xa4) returned 1 [0202.578] AreFileApisANSI () returned 1 [0202.578] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0202.581] CloseHandle (hObject=0xa4) returned 1 [0202.582] AreFileApisANSI () returned 1 [0202.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0202.584] CloseHandle (hObject=0xa4) returned 1 [0202.584] AreFileApisANSI () returned 1 [0202.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0202.585] CloseHandle (hObject=0xa4) returned 1 [0202.586] AreFileApisANSI () returned 1 [0202.586] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0202.598] CloseHandle (hObject=0xa4) returned 1 [0202.598] AreFileApisANSI () returned 1 [0202.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0202.599] CloseHandle (hObject=0xa4) returned 1 [0202.600] AreFileApisANSI () returned 1 [0202.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0202.601] CloseHandle (hObject=0xa4) returned 1 [0202.601] AreFileApisANSI () returned 1 [0202.601] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0202.603] CloseHandle (hObject=0xa4) returned 1 [0202.604] AreFileApisANSI () returned 1 [0202.604] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0202.605] CloseHandle (hObject=0xa4) returned 1 [0202.605] AreFileApisANSI () returned 1 [0202.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0202.606] CloseHandle (hObject=0xa4) returned 1 [0202.607] AreFileApisANSI () returned 1 [0202.607] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0202.610] CloseHandle (hObject=0xa4) returned 1 [0202.610] AreFileApisANSI () returned 1 [0202.610] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0202.614] CloseHandle (hObject=0xa4) returned 1 [0202.614] AreFileApisANSI () returned 1 [0202.614] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0202.615] CloseHandle (hObject=0xa4) returned 1 [0202.616] AreFileApisANSI () returned 1 [0202.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0202.617] CloseHandle (hObject=0xa4) returned 1 [0202.617] AreFileApisANSI () returned 1 [0202.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0202.638] CloseHandle (hObject=0xa8) returned 1 [0202.639] AreFileApisANSI () returned 1 [0202.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0202.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2588, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0202.639] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.cryptoid"), dwFlags=0x2) returned 1 [0202.641] AreFileApisANSI () returned 1 [0202.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0202.642] CloseHandle (hObject=0xa4) returned 1 [0202.642] AreFileApisANSI () returned 1 [0202.642] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0202.643] CloseHandle (hObject=0xa4) returned 1 [0202.643] AreFileApisANSI () returned 1 [0202.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0202.654] CloseHandle (hObject=0xa4) returned 1 [0202.655] AreFileApisANSI () returned 1 [0202.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0202.656] CloseHandle (hObject=0xa4) returned 1 [0202.656] AreFileApisANSI () returned 1 [0202.656] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0202.657] CloseHandle (hObject=0xa4) returned 1 [0202.658] AreFileApisANSI () returned 1 [0202.658] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0202.660] CloseHandle (hObject=0xa4) returned 1 [0202.661] AreFileApisANSI () returned 1 [0202.661] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3ad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 165 [0202.663] CloseHandle (hObject=0xa4) returned 1 [0202.663] AreFileApisANSI () returned 1 [0202.664] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a39e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 162 [0202.665] CloseHandle (hObject=0xa4) returned 1 [0202.665] AreFileApisANSI () returned 1 [0202.665] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a41a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 165 [0202.666] CloseHandle (hObject=0xa4) returned 1 [0202.667] AreFileApisANSI () returned 1 [0202.667] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1958, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 181 [0202.673] CloseHandle (hObject=0xa8) returned 1 [0202.673] AreFileApisANSI () returned 1 [0202.673] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2100, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 178 [0202.675] CloseHandle (hObject=0xa8) returned 1 [0202.675] AreFileApisANSI () returned 1 [0202.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a1ed0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 181 [0202.676] CloseHandle (hObject=0xa8) returned 1 [0202.677] AreFileApisANSI () returned 1 [0202.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 180 [0202.697] CloseHandle (hObject=0xac) returned 1 [0202.698] AreFileApisANSI () returned 1 [0202.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 180 [0202.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 189 [0202.698] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.cryptoid"), dwFlags=0x2) returned 1 [0202.699] AreFileApisANSI () returned 1 [0202.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498428, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0202.701] CloseHandle (hObject=0xa0) returned 1 [0202.702] AreFileApisANSI () returned 1 [0202.702] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4986a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0202.710] CloseHandle (hObject=0xa0) returned 1 [0202.710] AreFileApisANSI () returned 1 [0202.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4983a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0202.711] CloseHandle (hObject=0xa0) returned 1 [0202.712] AreFileApisANSI () returned 1 [0202.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0202.715] CloseHandle (hObject=0xa4) returned 1 [0202.716] AreFileApisANSI () returned 1 [0202.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0202.717] CloseHandle (hObject=0xa4) returned 1 [0202.718] AreFileApisANSI () returned 1 [0202.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4987a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0202.719] CloseHandle (hObject=0xa4) returned 1 [0202.719] AreFileApisANSI () returned 1 [0202.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4984a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0202.721] CloseHandle (hObject=0xa8) returned 1 [0202.721] AreFileApisANSI () returned 1 [0202.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498228, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0202.722] CloseHandle (hObject=0xa8) returned 1 [0202.723] AreFileApisANSI () returned 1 [0202.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0202.725] CloseHandle (hObject=0xa8) returned 1 [0202.725] AreFileApisANSI () returned 1 [0202.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0202.726] CloseHandle (hObject=0xa8) returned 1 [0202.727] AreFileApisANSI () returned 1 [0202.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4985a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0202.728] CloseHandle (hObject=0xa8) returned 1 [0202.728] AreFileApisANSI () returned 1 [0202.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0202.730] CloseHandle (hObject=0xa8) returned 1 [0202.730] AreFileApisANSI () returned 1 [0202.730] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0202.731] CloseHandle (hObject=0xa8) returned 1 [0202.732] AreFileApisANSI () returned 1 [0202.732] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0202.733] CloseHandle (hObject=0xa8) returned 1 [0202.733] AreFileApisANSI () returned 1 [0202.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4989a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0202.736] CloseHandle (hObject=0xa8) returned 1 [0202.736] AreFileApisANSI () returned 1 [0202.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4981a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0202.737] CloseHandle (hObject=0xa8) returned 1 [0202.737] AreFileApisANSI () returned 1 [0202.737] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498b28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0202.738] CloseHandle (hObject=0xa8) returned 1 [0202.739] AreFileApisANSI () returned 1 [0202.739] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0202.741] CloseHandle (hObject=0xa8) returned 1 [0202.742] AreFileApisANSI () returned 1 [0202.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0202.750] CloseHandle (hObject=0x9c) returned 1 [0202.750] AreFileApisANSI () returned 1 [0202.750] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0202.751] CloseHandle (hObject=0x9c) returned 1 [0202.752] AreFileApisANSI () returned 1 [0202.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0202.754] CloseHandle (hObject=0x9c) returned 1 [0202.755] AreFileApisANSI () returned 1 [0202.755] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0202.756] CloseHandle (hObject=0x9c) returned 1 [0202.756] AreFileApisANSI () returned 1 [0202.757] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0202.759] CloseHandle (hObject=0x9c) returned 1 [0202.759] AreFileApisANSI () returned 1 [0202.759] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0202.760] CloseHandle (hObject=0x9c) returned 1 [0202.761] AreFileApisANSI () returned 1 [0202.761] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0202.762] CloseHandle (hObject=0xa0) returned 1 [0202.762] AreFileApisANSI () returned 1 [0202.762] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0202.765] CloseHandle (hObject=0xa0) returned 1 [0202.765] AreFileApisANSI () returned 1 [0202.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0202.766] CloseHandle (hObject=0xa0) returned 1 [0202.767] AreFileApisANSI () returned 1 [0202.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4986a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0202.768] CloseHandle (hObject=0xa4) returned 1 [0202.768] AreFileApisANSI () returned 1 [0202.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498128, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0202.769] CloseHandle (hObject=0xa4) returned 1 [0202.770] AreFileApisANSI () returned 1 [0202.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4986a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0202.772] CloseHandle (hObject=0xa4) returned 1 [0202.773] AreFileApisANSI () returned 1 [0202.773] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0202.774] CloseHandle (hObject=0xa4) returned 1 [0202.775] AreFileApisANSI () returned 1 [0202.775] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0202.776] CloseHandle (hObject=0xa4) returned 1 [0202.776] AreFileApisANSI () returned 1 [0202.776] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497e28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0202.778] CloseHandle (hObject=0xa4) returned 1 [0202.779] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Publishers\\8wekyb3d8bbwe\\Licenses\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x494f60 [0202.779] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0202.779] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0202.779] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0202.779] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0202.779] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0 [0202.779] FindClose (in: hFindFile=0x494f60 | out: hFindFile=0x494f60) returned 1 [0202.780] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 0 [0202.780] FindClose (in: hFindFile=0x494e60 | out: hFindFile=0x494e60) returned 1 [0202.780] FindNextFileA (in: hFindFile=0x494ca0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0202.780] FindNextFileA (in: hFindFile=0x494ca0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0202.780] FindNextFileA (in: hFindFile=0x494ca0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0202.780] FindNextFileA (in: hFindFile=0x494ca0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0202.780] FindClose (in: hFindFile=0x494ca0 | out: hFindFile=0x494ca0) returned 1 [0202.780] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0202.780] AreFileApisANSI () returned 1 [0202.780] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0202.780] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c [0202.784] GetFileType (hFile=0x9c) returned 0x1 [0202.784] WriteFile (in: hFile=0x9c, lpBuffer=0x3da9c0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3da9b8, lpOverlapped=0x0 | out: lpBuffer=0x3da9c0*, lpNumberOfBytesWritten=0x3da9b8*=0x423, lpOverlapped=0x0) returned 1 [0202.784] CloseHandle (hObject=0x9c) returned 1 [0202.785] AreFileApisANSI () returned 1 [0202.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0202.785] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c [0202.785] GetFileType (hFile=0x9c) returned 0x1 [0202.785] WriteFile (in: hFile=0x9c, lpBuffer=0x3da9c0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3da9b8, lpOverlapped=0x0 | out: lpBuffer=0x3da9c0*, lpNumberOfBytesWritten=0x3da9b8*=0x423, lpOverlapped=0x0) returned 1 [0202.786] CloseHandle (hObject=0x9c) returned 1 [0202.787] AreFileApisANSI () returned 1 [0202.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0202.787] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c [0202.787] GetFileType (hFile=0x9c) returned 0x1 [0202.787] WriteFile (in: hFile=0x9c, lpBuffer=0x3da9c0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3da9b8, lpOverlapped=0x0 | out: lpBuffer=0x3da9c0*, lpNumberOfBytesWritten=0x3da9b8*=0x423, lpOverlapped=0x0) returned 1 [0202.788] CloseHandle (hObject=0x9c) returned 1 [0202.788] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494aa0 [0202.788] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0202.789] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0202.789] AreFileApisANSI () returned 1 [0202.789] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0202.789] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\0wFcrePTq CY.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\0wfcreptq cy.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbcd8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa0 [0202.790] GetFileType (hFile=0xa0) returned 0x1 [0202.791] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd88 | out: lpNewFilePointer=0x0) returned 1 [0202.791] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd3c | out: lpNewFilePointer=0x0) returned 1 [0202.791] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd6c | out: lpNewFilePointer=0x0) returned 1 [0202.791] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.791] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.791] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd6c | out: lpNewFilePointer=0x0) returned 1 [0202.791] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.791] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.791] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.793] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.793] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.793] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.794] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.794] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.794] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.794] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.794] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.794] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.794] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.794] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.794] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.794] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.794] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.795] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.795] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.795] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.795] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.795] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.795] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.795] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.795] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.795] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.795] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.796] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.796] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.796] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.796] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.796] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.796] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.796] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.796] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.797] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.797] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.797] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.797] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.797] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.797] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.797] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.797] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.797] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.797] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.797] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.798] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.798] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.798] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.798] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.798] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.798] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.798] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.798] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.798] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.798] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.798] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.799] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.799] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.799] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.799] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.799] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.799] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.799] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.799] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.799] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.799] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.799] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.800] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.800] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.800] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.800] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.800] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.800] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.800] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.800] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.800] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.800] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.800] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.801] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.801] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.801] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.801] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.801] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.801] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.801] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.801] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.801] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.801] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.801] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.801] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.802] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.802] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.802] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.802] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.802] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.802] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.802] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.802] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.802] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.802] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.802] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.802] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.803] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.803] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.803] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.803] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.803] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.803] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.803] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.803] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.803] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.803] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.803] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.803] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.804] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.804] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.804] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.804] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.804] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.804] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.804] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.804] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.804] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.804] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.804] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.804] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.805] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.805] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.805] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.805] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.805] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.805] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.805] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.805] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.805] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.805] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.805] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.805] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.806] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.806] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.806] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.806] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.806] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.806] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.806] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.806] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.806] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.806] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.806] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.806] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.807] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.807] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.807] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.807] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.807] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.807] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.807] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.807] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.807] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.807] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.807] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.807] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.808] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.808] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.808] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.808] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.808] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.808] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.808] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.808] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.808] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.808] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.808] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.808] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.809] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.809] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.809] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.809] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.809] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.809] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.809] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.809] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.809] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.809] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.809] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.809] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.809] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.810] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.810] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.810] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.810] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.810] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.810] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.810] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.811] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.811] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.811] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.811] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.811] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.811] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.811] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.811] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.811] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.811] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.811] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.811] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.812] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.812] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.812] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.812] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.812] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.812] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.812] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.812] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.812] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.812] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.812] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.812] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.812] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.813] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.813] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.813] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.813] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.813] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.813] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.813] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.813] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.813] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.813] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.813] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.813] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.814] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.814] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.814] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.814] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.814] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.814] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.814] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.814] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.814] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.814] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.814] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.814] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.814] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.815] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.815] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.815] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.815] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.815] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.815] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.815] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.815] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.815] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.815] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.815] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.815] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.816] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.816] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.816] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.816] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.816] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.816] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.816] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.816] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.816] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.816] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.816] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.816] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.817] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.817] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.817] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.817] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.817] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.817] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.817] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.817] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.817] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.817] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.817] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.817] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.818] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.818] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.818] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.818] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.818] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.818] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.818] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.818] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.818] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.818] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.818] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.818] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.818] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.819] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd38 | out: lpNewFilePointer=0x0) returned 1 [0202.819] WriteFile (in: hFile=0xa0, lpBuffer=0x4b2d88*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesWritten=0x3dbd04*=0x8, lpOverlapped=0x0) returned 1 [0202.819] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd60 | out: lpNewFilePointer=0x0) returned 1 [0202.819] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbcf4 | out: lpNewFilePointer=0x0) returned 1 [0202.819] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd70 | out: lpNewFilePointer=0x0) returned 1 [0202.819] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd24 | out: lpNewFilePointer=0x0) returned 1 [0202.819] ReadFile (in: hFile=0xa0, lpBuffer=0x4b2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dbd04, lpOverlapped=0x0 | out: lpBuffer=0x4b2d88*, lpNumberOfBytesRead=0x3dbd04*=0x1000, lpOverlapped=0x0) returned 1 [0202.819] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd74 | out: lpNewFilePointer=0x0) returned 1 [0202.819] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd08 | out: lpNewFilePointer=0x0) returned 1 [0202.819] SetFilePointerEx (in: hFile=0xa0, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3dbd84 | out: lpNewFilePointer=0x0) returned 1 [0202.900] CloseHandle (hObject=0xa0) returned 1 [0202.902] AreFileApisANSI () returned 1 [0202.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0202.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d2a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0202.902] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\0wFcrePTq CY.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\0wfcreptq cy.bmp"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\0wFcrePTq CY.bmp.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\0wfcreptq cy.bmp.cryptoid"), dwFlags=0x2) returned 1 [0202.903] AreFileApisANSI () returned 1 [0202.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0202.919] CloseHandle (hObject=0xa0) returned 1 [0202.920] AreFileApisANSI () returned 1 [0202.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0202.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495f70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0202.920] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\3vD7fRb.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\3vd7frb.m4a"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\3vD7fRb.m4a.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\3vd7frb.m4a.cryptoid"), dwFlags=0x2) returned 1 [0202.921] AreFileApisANSI () returned 1 [0202.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0202.966] CloseHandle (hObject=0xa0) returned 1 [0202.967] AreFileApisANSI () returned 1 [0202.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0202.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0202.967] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\8jFS 2r1vtcOH.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\8jfs 2r1vtcoh.ots"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\8jFS 2r1vtcOH.ots.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\8jfs 2r1vtcoh.ots.cryptoid"), dwFlags=0x2) returned 1 [0202.968] AreFileApisANSI () returned 1 [0202.968] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0203.010] CloseHandle (hObject=0xa0) returned 1 [0203.011] AreFileApisANSI () returned 1 [0203.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0203.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0203.011] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\bDaUXyabFxrOpk.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\bdauxyabfxropk.swf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\bDaUXyabFxrOpk.swf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\bdauxyabfxropk.swf.cryptoid"), dwFlags=0x2) returned 1 [0203.012] AreFileApisANSI () returned 1 [0203.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0203.034] CloseHandle (hObject=0xa0) returned 1 [0203.034] AreFileApisANSI () returned 1 [0203.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0203.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d1a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0203.035] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\bouG2yezxQuVpYdBuH7j.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\boug2yezxquvpydbuh7j.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\bouG2yezxQuVpYdBuH7j.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\boug2yezxquvpydbuh7j.gif.cryptoid"), dwFlags=0x2) returned 1 [0203.036] AreFileApisANSI () returned 1 [0203.036] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0203.070] CloseHandle (hObject=0xa0) returned 1 [0203.070] AreFileApisANSI () returned 1 [0203.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0203.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d040, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0203.070] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\cMnhSuC9fV_iEhhDt.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\cmnhsuc9fv_iehhdt.odp"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\cMnhSuC9fV_iEhhDt.odp.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\cmnhsuc9fv_iehhdt.odp.cryptoid"), dwFlags=0x2) returned 1 [0203.072] AreFileApisANSI () returned 1 [0203.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0203.161] CloseHandle (hObject=0xa0) returned 1 [0203.161] AreFileApisANSI () returned 1 [0203.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0203.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d300, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0203.162] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\DDpIIW4fNyaYJ4mhXxM.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ddpiiw4fnyayj4mhxxm.mkv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\DDpIIW4fNyaYJ4mhXxM.mkv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ddpiiw4fnyayj4mhxxm.mkv.cryptoid"), dwFlags=0x2) returned 1 [0203.163] AreFileApisANSI () returned 1 [0203.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0203.204] CloseHandle (hObject=0xa0) returned 1 [0203.205] AreFileApisANSI () returned 1 [0203.205] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0203.205] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0203.205] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\FVENvK.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\fvenvk.pps"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\FVENvK.pps.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\fvenvk.pps.cryptoid"), dwFlags=0x2) returned 1 [0203.206] AreFileApisANSI () returned 1 [0203.206] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0203.211] CloseHandle (hObject=0xa0) returned 1 [0203.212] AreFileApisANSI () returned 1 [0203.212] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0203.212] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d2a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0203.212] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\FYj4nPwew.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\fyj4npwew.ots"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\FYj4nPwew.ots.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\fyj4npwew.ots.cryptoid"), dwFlags=0x2) returned 1 [0203.213] AreFileApisANSI () returned 1 [0203.213] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0203.264] CloseHandle (hObject=0xa0) returned 1 [0203.265] AreFileApisANSI () returned 1 [0203.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0203.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0203.265] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\hINA7EM5L.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\hina7em5l.bmp"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\hINA7EM5L.bmp.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\hina7em5l.bmp.cryptoid"), dwFlags=0x2) returned 1 [0203.267] AreFileApisANSI () returned 1 [0203.267] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0203.361] CloseHandle (hObject=0xa0) returned 1 [0203.361] AreFileApisANSI () returned 1 [0203.361] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0203.361] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495d30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0203.361] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\k5DE3vgM.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\k5de3vgm.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\k5DE3vgM.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\k5de3vgm.wav.cryptoid"), dwFlags=0x2) returned 1 [0203.362] AreFileApisANSI () returned 1 [0203.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0203.410] CloseHandle (hObject=0xa0) returned 1 [0203.410] AreFileApisANSI () returned 1 [0203.411] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0203.411] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cfe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0203.411] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\KEGpgtP1D9dHAs8.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\kegpgtp1d9dhas8.mp4"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\KEGpgtP1D9dHAs8.mp4.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\kegpgtp1d9dhas8.mp4.cryptoid"), dwFlags=0x2) returned 1 [0203.412] AreFileApisANSI () returned 1 [0203.412] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0203.450] CloseHandle (hObject=0xa0) returned 1 [0203.450] AreFileApisANSI () returned 1 [0203.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0203.450] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cdd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0203.450] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\MDZIlnr7hzzIb_SdRmVa.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\mdzilnr7hzzib_sdrmva.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\MDZIlnr7hzzIb_SdRmVa.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\mdzilnr7hzzib_sdrmva.wav.cryptoid"), dwFlags=0x2) returned 1 [0203.452] AreFileApisANSI () returned 1 [0203.452] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0203.455] CloseHandle (hObject=0xa0) returned 1 [0203.456] AreFileApisANSI () returned 1 [0203.456] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0203.456] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d040, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0203.456] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\N8p7C0adA-U01XEWES.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\n8p7c0ada-u01xewes.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\N8p7C0adA-U01XEWES.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\n8p7c0ada-u01xewes.gif.cryptoid"), dwFlags=0x2) returned 1 [0203.457] AreFileApisANSI () returned 1 [0203.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0203.501] CloseHandle (hObject=0xa0) returned 1 [0203.502] AreFileApisANSI () returned 1 [0203.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0203.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cdd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0203.502] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\NeAXm8q4uljffnDMUf.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\neaxm8q4uljffndmuf.xls"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\NeAXm8q4uljffnDMUf.xls.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\neaxm8q4uljffndmuf.xls.cryptoid"), dwFlags=0x2) returned 1 [0203.503] AreFileApisANSI () returned 1 [0203.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0203.579] CloseHandle (hObject=0xa0) returned 1 [0203.580] AreFileApisANSI () returned 1 [0203.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0203.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4959d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0203.580] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\OFLixtr.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\oflixtr.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\OFLixtr.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\oflixtr.wav.cryptoid"), dwFlags=0x2) returned 1 [0203.581] AreFileApisANSI () returned 1 [0203.581] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0203.638] CloseHandle (hObject=0xa0) returned 1 [0203.639] AreFileApisANSI () returned 1 [0203.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0203.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0203.639] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\OJHJ9habk134yYM1 4J.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ojhj9habk134yym1 4j.m4a"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\OJHJ9habk134yYM1 4J.m4a.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ojhj9habk134yym1 4j.m4a.cryptoid"), dwFlags=0x2) returned 1 [0203.640] AreFileApisANSI () returned 1 [0203.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0203.712] CloseHandle (hObject=0xa0) returned 1 [0203.712] AreFileApisANSI () returned 1 [0203.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0203.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0203.712] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Q NjUqKpQNoyMEF3.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\q njuqkpqnoymef3.avi"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Q NjUqKpQNoyMEF3.avi.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\q njuqkpqnoymef3.avi.cryptoid"), dwFlags=0x2) returned 1 [0203.713] AreFileApisANSI () returned 1 [0203.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0203.744] CloseHandle (hObject=0xa0) returned 1 [0203.744] AreFileApisANSI () returned 1 [0203.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0203.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495f70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0203.744] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\q7AmJip.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\q7amjip.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\q7AmJip.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\q7amjip.gif.cryptoid"), dwFlags=0x2) returned 1 [0203.745] AreFileApisANSI () returned 1 [0203.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0203.754] CloseHandle (hObject=0xa0) returned 1 [0203.755] AreFileApisANSI () returned 1 [0203.755] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0203.755] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d300, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0203.755] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\QFRx2hEfC-vu1.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\qfrx2hefc-vu1.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\QFRx2hEfC-vu1.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\qfrx2hefc-vu1.wav.cryptoid"), dwFlags=0x2) returned 1 [0203.756] AreFileApisANSI () returned 1 [0203.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0203.794] CloseHandle (hObject=0xa0) returned 1 [0203.795] AreFileApisANSI () returned 1 [0203.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0203.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4958b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0203.795] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\rpqgvH.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\rpqgvh.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\rpqgvH.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\rpqgvh.jpg.cryptoid"), dwFlags=0x2) returned 1 [0203.796] AreFileApisANSI () returned 1 [0203.796] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0203.838] CloseHandle (hObject=0xa0) returned 1 [0203.838] AreFileApisANSI () returned 1 [0203.838] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0203.838] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cfe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0203.838] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\tmKOdOxCO6gTk.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\tmkodoxco6gtk.pptx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\tmKOdOxCO6gTk.pptx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\tmkodoxco6gtk.pptx.cryptoid"), dwFlags=0x2) returned 1 [0203.839] AreFileApisANSI () returned 1 [0203.839] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0203.912] CloseHandle (hObject=0xa0) returned 1 [0203.913] AreFileApisANSI () returned 1 [0203.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0203.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d1f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0203.913] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Vm7qjEPydEqCSfg3q.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\vm7qjepydeqcsfg3q.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Vm7qjEPydEqCSfg3q.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\vm7qjepydeqcsfg3q.gif.cryptoid"), dwFlags=0x2) returned 1 [0203.914] AreFileApisANSI () returned 1 [0203.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0203.956] CloseHandle (hObject=0xa0) returned 1 [0203.957] AreFileApisANSI () returned 1 [0203.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0203.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cd28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0203.957] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\WxNBQrVLr.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\wxnbqrvlr.m4a"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\WxNBQrVLr.m4a.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\wxnbqrvlr.m4a.cryptoid"), dwFlags=0x2) returned 1 [0203.958] AreFileApisANSI () returned 1 [0203.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0203.975] CloseHandle (hObject=0xa0) returned 1 [0203.976] AreFileApisANSI () returned 1 [0203.976] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0203.976] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495f70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0203.976] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\ZyERDep.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\zyerdep.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\ZyERDep.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\zyerdep.jpg.cryptoid"), dwFlags=0x2) returned 1 [0203.977] AreFileApisANSI () returned 1 [0203.977] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0203.979] CloseHandle (hObject=0x9c) returned 1 [0203.979] AreFileApisANSI () returned 1 [0203.979] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0203.980] CloseHandle (hObject=0x9c) returned 1 [0203.980] AreFileApisANSI () returned 1 [0203.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0203.981] CloseHandle (hObject=0x9c) returned 1 [0203.982] AreFileApisANSI () returned 1 [0203.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0203.983] CloseHandle (hObject=0x9c) returned 1 [0203.983] AreFileApisANSI () returned 1 [0203.983] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0203.985] CloseHandle (hObject=0x9c) returned 1 [0203.985] AreFileApisANSI () returned 1 [0203.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0203.986] CloseHandle (hObject=0x9c) returned 1 [0203.987] AreFileApisANSI () returned 1 [0203.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0203.987] CloseHandle (hObject=0xa0) returned 1 [0203.988] AreFileApisANSI () returned 1 [0203.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0203.989] CloseHandle (hObject=0xa0) returned 1 [0203.989] AreFileApisANSI () returned 1 [0203.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0203.990] CloseHandle (hObject=0xa0) returned 1 [0203.990] AreFileApisANSI () returned 1 [0203.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0203.990] AreFileApisANSI () returned 1 [0203.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0203.991] CloseHandle (hObject=0x9c) returned 1 [0203.992] AreFileApisANSI () returned 1 [0203.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0203.992] CloseHandle (hObject=0x9c) returned 1 [0203.993] AreFileApisANSI () returned 1 [0203.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0203.995] CloseHandle (hObject=0x9c) returned 1 [0203.995] AreFileApisANSI () returned 1 [0203.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0203.997] CloseHandle (hObject=0x98) returned 1 [0203.997] AreFileApisANSI () returned 1 [0203.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0203.998] CloseHandle (hObject=0x98) returned 1 [0203.998] AreFileApisANSI () returned 1 [0203.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0203.999] CloseHandle (hObject=0x98) returned 1 [0204.000] AreFileApisANSI () returned 1 [0204.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d2a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0204.001] CloseHandle (hObject=0x9c) returned 1 [0204.001] AreFileApisANSI () returned 1 [0204.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0204.003] CloseHandle (hObject=0x9c) returned 1 [0204.003] AreFileApisANSI () returned 1 [0204.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cf38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0204.004] CloseHandle (hObject=0x9c) returned 1 [0204.005] AreFileApisANSI () returned 1 [0204.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0204.006] CloseHandle (hObject=0xa0) returned 1 [0204.006] AreFileApisANSI () returned 1 [0204.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0204.007] CloseHandle (hObject=0xa0) returned 1 [0204.007] AreFileApisANSI () returned 1 [0204.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0204.010] CloseHandle (hObject=0xa0) returned 1 [0204.011] AreFileApisANSI () returned 1 [0204.011] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0204.012] CloseHandle (hObject=0xa4) returned 1 [0204.012] AreFileApisANSI () returned 1 [0204.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0204.014] CloseHandle (hObject=0xa4) returned 1 [0204.015] AreFileApisANSI () returned 1 [0204.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0204.016] CloseHandle (hObject=0xa4) returned 1 [0204.016] AreFileApisANSI () returned 1 [0204.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0204.017] CloseHandle (hObject=0xa8) returned 1 [0204.017] AreFileApisANSI () returned 1 [0204.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0204.018] CloseHandle (hObject=0xa8) returned 1 [0204.018] AreFileApisANSI () returned 1 [0204.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498828, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0204.020] CloseHandle (hObject=0xa8) returned 1 [0204.021] AreFileApisANSI () returned 1 [0204.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497e28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0204.022] CloseHandle (hObject=0xa8) returned 1 [0204.022] AreFileApisANSI () returned 1 [0204.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497d28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0204.023] CloseHandle (hObject=0xa8) returned 1 [0204.023] AreFileApisANSI () returned 1 [0204.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4983a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0204.025] CloseHandle (hObject=0xa8) returned 1 [0204.025] AreFileApisANSI () returned 1 [0204.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0204.026] CloseHandle (hObject=0xa0) returned 1 [0204.027] AreFileApisANSI () returned 1 [0204.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0204.029] CloseHandle (hObject=0xa0) returned 1 [0204.029] AreFileApisANSI () returned 1 [0204.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0204.030] CloseHandle (hObject=0xa0) returned 1 [0204.031] AreFileApisANSI () returned 1 [0204.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0204.032] CloseHandle (hObject=0xa4) returned 1 [0204.032] AreFileApisANSI () returned 1 [0204.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4984a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0204.034] CloseHandle (hObject=0xa4) returned 1 [0204.034] AreFileApisANSI () returned 1 [0204.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0204.035] CloseHandle (hObject=0xa4) returned 1 [0204.035] AreFileApisANSI () returned 1 [0204.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0204.059] CloseHandle (hObject=0xa8) returned 1 [0204.060] AreFileApisANSI () returned 1 [0204.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0204.061] CloseHandle (hObject=0xa8) returned 1 [0204.062] AreFileApisANSI () returned 1 [0204.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0204.062] CloseHandle (hObject=0xa8) returned 1 [0204.063] AreFileApisANSI () returned 1 [0204.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0204.064] CloseHandle (hObject=0xac) returned 1 [0204.064] AreFileApisANSI () returned 1 [0204.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0204.065] CloseHandle (hObject=0xac) returned 1 [0204.065] AreFileApisANSI () returned 1 [0204.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0204.067] CloseHandle (hObject=0xac) returned 1 [0204.068] AreFileApisANSI () returned 1 [0204.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0204.069] CloseHandle (hObject=0xac) returned 1 [0204.069] AreFileApisANSI () returned 1 [0204.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0204.070] CloseHandle (hObject=0xac) returned 1 [0204.071] AreFileApisANSI () returned 1 [0204.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0204.072] CloseHandle (hObject=0xac) returned 1 [0204.073] AreFileApisANSI () returned 1 [0204.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0204.075] CloseHandle (hObject=0xac) returned 1 [0204.075] AreFileApisANSI () returned 1 [0204.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0204.077] CloseHandle (hObject=0xac) returned 1 [0204.077] AreFileApisANSI () returned 1 [0204.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0204.080] CloseHandle (hObject=0xac) returned 1 [0204.080] AreFileApisANSI () returned 1 [0204.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0204.082] CloseHandle (hObject=0xac) returned 1 [0204.082] AreFileApisANSI () returned 1 [0204.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0204.083] CloseHandle (hObject=0xac) returned 1 [0204.084] AreFileApisANSI () returned 1 [0204.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0204.086] CloseHandle (hObject=0xac) returned 1 [0204.086] AreFileApisANSI () returned 1 [0204.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0204.087] CloseHandle (hObject=0xac) returned 1 [0204.087] AreFileApisANSI () returned 1 [0204.087] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0204.088] CloseHandle (hObject=0xac) returned 1 [0204.089] AreFileApisANSI () returned 1 [0204.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0204.091] CloseHandle (hObject=0xac) returned 1 [0204.092] AreFileApisANSI () returned 1 [0204.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0204.093] CloseHandle (hObject=0xac) returned 1 [0204.093] AreFileApisANSI () returned 1 [0204.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0204.094] CloseHandle (hObject=0xac) returned 1 [0204.094] AreFileApisANSI () returned 1 [0204.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0204.096] CloseHandle (hObject=0xac) returned 1 [0204.096] AreFileApisANSI () returned 1 [0204.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0204.097] CloseHandle (hObject=0xac) returned 1 [0204.098] AreFileApisANSI () returned 1 [0204.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0204.099] CloseHandle (hObject=0xac) returned 1 [0204.099] AreFileApisANSI () returned 1 [0204.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0204.101] CloseHandle (hObject=0xac) returned 1 [0204.101] AreFileApisANSI () returned 1 [0204.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0204.103] CloseHandle (hObject=0x9c) returned 1 [0204.103] AreFileApisANSI () returned 1 [0204.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0204.104] CloseHandle (hObject=0x9c) returned 1 [0204.104] AreFileApisANSI () returned 1 [0204.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0204.105] CloseHandle (hObject=0x9c) returned 1 [0204.106] AreFileApisANSI () returned 1 [0204.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0204.106] CloseHandle (hObject=0xa0) returned 1 [0204.107] AreFileApisANSI () returned 1 [0204.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498228, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0204.109] CloseHandle (hObject=0xa0) returned 1 [0204.110] AreFileApisANSI () returned 1 [0204.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0204.110] CloseHandle (hObject=0xa0) returned 1 [0204.111] AreFileApisANSI () returned 1 [0204.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0204.116] CloseHandle (hObject=0xa4) returned 1 [0204.116] AreFileApisANSI () returned 1 [0204.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4987a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0204.117] CloseHandle (hObject=0xa4) returned 1 [0204.117] AreFileApisANSI () returned 1 [0204.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4980a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0204.118] CloseHandle (hObject=0xa4) returned 1 [0204.129] AreFileApisANSI () returned 1 [0204.129] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0204.133] CloseHandle (hObject=0xa4) returned 1 [0204.133] AreFileApisANSI () returned 1 [0204.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4983a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0204.134] CloseHandle (hObject=0xa4) returned 1 [0204.134] AreFileApisANSI () returned 1 [0204.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498828, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0204.135] CloseHandle (hObject=0xa4) returned 1 [0204.139] AreFileApisANSI () returned 1 [0204.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4986a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0204.143] CloseHandle (hObject=0xa0) returned 1 [0204.143] AreFileApisANSI () returned 1 [0204.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4987a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0204.144] CloseHandle (hObject=0xa0) returned 1 [0204.144] AreFileApisANSI () returned 1 [0204.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497d28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0204.145] CloseHandle (hObject=0xa0) returned 1 [0204.146] AreFileApisANSI () returned 1 [0204.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0204.148] CloseHandle (hObject=0xa4) returned 1 [0204.149] AreFileApisANSI () returned 1 [0204.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0204.150] CloseHandle (hObject=0xa4) returned 1 [0204.150] AreFileApisANSI () returned 1 [0204.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0204.151] CloseHandle (hObject=0xa4) returned 1 [0204.151] AreFileApisANSI () returned 1 [0204.151] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0204.153] CloseHandle (hObject=0xa8) returned 1 [0204.153] AreFileApisANSI () returned 1 [0204.153] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0204.155] CloseHandle (hObject=0xa8) returned 1 [0204.155] AreFileApisANSI () returned 1 [0204.155] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0204.156] CloseHandle (hObject=0xa8) returned 1 [0204.156] AreFileApisANSI () returned 1 [0204.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0204.157] CloseHandle (hObject=0xa8) returned 1 [0204.158] AreFileApisANSI () returned 1 [0204.158] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0204.160] CloseHandle (hObject=0xa8) returned 1 [0204.160] AreFileApisANSI () returned 1 [0204.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0204.161] CloseHandle (hObject=0xa8) returned 1 [0204.161] AreFileApisANSI () returned 1 [0204.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0204.161] CloseHandle (hObject=0xa8) returned 1 [0204.162] AreFileApisANSI () returned 1 [0204.162] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0204.162] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4939c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0204.162] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0204.162] AreFileApisANSI () returned 1 [0204.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0204.165] CloseHandle (hObject=0xa8) returned 1 [0204.165] AreFileApisANSI () returned 1 [0204.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0204.166] CloseHandle (hObject=0xa8) returned 1 [0204.166] AreFileApisANSI () returned 1 [0204.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0204.167] CloseHandle (hObject=0xa8) returned 1 [0204.168] AreFileApisANSI () returned 1 [0204.168] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0204.168] CloseHandle (hObject=0xa8) returned 1 [0204.169] AreFileApisANSI () returned 1 [0204.169] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0204.171] CloseHandle (hObject=0xa8) returned 1 [0204.171] AreFileApisANSI () returned 1 [0204.171] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0204.172] CloseHandle (hObject=0xa8) returned 1 [0204.173] AreFileApisANSI () returned 1 [0204.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0204.174] CloseHandle (hObject=0xa4) returned 1 [0204.175] AreFileApisANSI () returned 1 [0204.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0204.177] CloseHandle (hObject=0xa4) returned 1 [0204.177] AreFileApisANSI () returned 1 [0204.177] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0204.178] CloseHandle (hObject=0xa4) returned 1 [0204.179] AreFileApisANSI () returned 1 [0204.179] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0204.180] CloseHandle (hObject=0xa8) returned 1 [0204.180] AreFileApisANSI () returned 1 [0204.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0204.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493ab0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0204.180] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0204.181] AreFileApisANSI () returned 1 [0204.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0204.182] CloseHandle (hObject=0xa4) returned 1 [0204.182] AreFileApisANSI () returned 1 [0204.182] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0204.184] CloseHandle (hObject=0xa4) returned 1 [0204.184] AreFileApisANSI () returned 1 [0204.184] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0204.185] CloseHandle (hObject=0xa4) returned 1 [0204.185] AreFileApisANSI () returned 1 [0204.185] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0204.186] CloseHandle (hObject=0xa8) returned 1 [0204.186] AreFileApisANSI () returned 1 [0204.186] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0204.186] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4938d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0204.186] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emiesitelist\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emiesitelist\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0204.187] AreFileApisANSI () returned 1 [0204.187] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0204.188] CloseHandle (hObject=0xa4) returned 1 [0204.188] AreFileApisANSI () returned 1 [0204.188] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0204.190] CloseHandle (hObject=0xa4) returned 1 [0204.190] AreFileApisANSI () returned 1 [0204.191] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0204.191] CloseHandle (hObject=0xa4) returned 1 [0204.192] AreFileApisANSI () returned 1 [0204.192] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0204.192] CloseHandle (hObject=0xa8) returned 1 [0204.192] AreFileApisANSI () returned 1 [0204.192] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0204.192] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493ee8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0204.192] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emieuserlist\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emieuserlist\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0204.193] AreFileApisANSI () returned 1 [0204.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0204.194] GetFileType (hFile=0xa4) returned 0x1 [0204.194] CloseHandle (hObject=0xa4) returned 1 [0204.195] AreFileApisANSI () returned 1 [0204.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0204.196] CloseHandle (hObject=0xa4) returned 1 [0204.196] AreFileApisANSI () returned 1 [0204.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0204.198] CloseHandle (hObject=0xa4) returned 1 [0204.198] AreFileApisANSI () returned 1 [0204.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0204.200] CloseHandle (hObject=0xa0) returned 1 [0204.200] AreFileApisANSI () returned 1 [0204.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0204.201] CloseHandle (hObject=0xa0) returned 1 [0204.202] AreFileApisANSI () returned 1 [0204.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0204.205] CloseHandle (hObject=0xa0) returned 1 [0204.206] AreFileApisANSI () returned 1 [0204.206] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498228, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0204.207] CloseHandle (hObject=0xa4) returned 1 [0204.207] AreFileApisANSI () returned 1 [0204.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0204.209] CloseHandle (hObject=0xa4) returned 1 [0204.209] AreFileApisANSI () returned 1 [0204.209] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4989a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0204.210] CloseHandle (hObject=0xa4) returned 1 [0204.210] AreFileApisANSI () returned 1 [0204.210] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0204.211] CloseHandle (hObject=0xa8) returned 1 [0204.211] AreFileApisANSI () returned 1 [0204.211] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0204.211] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0204.211] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\windows\\appcache\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\windows\\appcache\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0204.212] AreFileApisANSI () returned 1 [0204.212] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0204.213] CloseHandle (hObject=0xa8) returned 1 [0204.213] AreFileApisANSI () returned 1 [0204.213] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498128, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0204.215] CloseHandle (hObject=0xa8) returned 1 [0204.215] AreFileApisANSI () returned 1 [0204.215] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498128, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0204.217] CloseHandle (hObject=0xa8) returned 1 [0204.217] AreFileApisANSI () returned 1 [0204.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0204.217] CloseHandle (hObject=0xac) returned 1 [0204.218] AreFileApisANSI () returned 1 [0204.218] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0204.218] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493a38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0204.218] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\windows\\appcache\\w91w3ib2\\container.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\windows\\appcache\\w91w3ib2\\container.dat.cryptoid"), dwFlags=0x2) returned 1 [0204.219] AreFileApisANSI () returned 1 [0204.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0204.220] CloseHandle (hObject=0x9c) returned 1 [0204.220] AreFileApisANSI () returned 1 [0204.220] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0204.221] CloseHandle (hObject=0x9c) returned 1 [0204.222] AreFileApisANSI () returned 1 [0204.222] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0204.223] CloseHandle (hObject=0x9c) returned 1 [0204.224] AreFileApisANSI () returned 1 [0204.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d300, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0204.295] CloseHandle (hObject=0x9c) returned 1 [0204.310] AreFileApisANSI () returned 1 [0204.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0204.311] CloseHandle (hObject=0x9c) returned 1 [0204.312] AreFileApisANSI () returned 1 [0204.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d300, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0204.314] CloseHandle (hObject=0x9c) returned 1 [0204.314] AreFileApisANSI () returned 1 [0204.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0204.315] CloseHandle (hObject=0xa0) returned 1 [0204.316] AreFileApisANSI () returned 1 [0204.316] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0204.317] CloseHandle (hObject=0xa0) returned 1 [0204.317] AreFileApisANSI () returned 1 [0204.317] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0204.349] CloseHandle (hObject=0xa0) returned 1 [0204.350] AreFileApisANSI () returned 1 [0204.350] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0204.375] CloseHandle (hObject=0xa4) returned 1 [0204.376] AreFileApisANSI () returned 1 [0204.376] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0204.451] CloseHandle (hObject=0xa4) returned 1 [0204.451] AreFileApisANSI () returned 1 [0204.451] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0204.452] CloseHandle (hObject=0xa4) returned 1 [0204.453] AreFileApisANSI () returned 1 [0204.453] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498a28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0204.455] CloseHandle (hObject=0xa8) returned 1 [0204.455] AreFileApisANSI () returned 1 [0204.455] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497e28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0204.456] CloseHandle (hObject=0xa8) returned 1 [0204.456] AreFileApisANSI () returned 1 [0204.456] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497d28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0204.458] CloseHandle (hObject=0xa8) returned 1 [0204.459] AreFileApisANSI () returned 1 [0204.459] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0204.460] CloseHandle (hObject=0xa8) returned 1 [0204.460] AreFileApisANSI () returned 1 [0204.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498528, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0204.461] CloseHandle (hObject=0xa8) returned 1 [0204.461] AreFileApisANSI () returned 1 [0204.461] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498128, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0204.497] CloseHandle (hObject=0xa8) returned 1 [0204.497] AreFileApisANSI () returned 1 [0204.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498128, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0204.498] CloseHandle (hObject=0xa8) returned 1 [0204.499] AreFileApisANSI () returned 1 [0204.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0204.500] CloseHandle (hObject=0xa8) returned 1 [0204.500] AreFileApisANSI () returned 1 [0204.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0204.513] CloseHandle (hObject=0xa8) returned 1 [0204.513] AreFileApisANSI () returned 1 [0204.513] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0204.514] CloseHandle (hObject=0xac) returned 1 [0204.515] AreFileApisANSI () returned 1 [0204.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497d28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0204.516] CloseHandle (hObject=0xac) returned 1 [0204.516] AreFileApisANSI () returned 1 [0204.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0204.519] CloseHandle (hObject=0xac) returned 1 [0204.519] AreFileApisANSI () returned 1 [0204.519] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0204.521] CloseHandle (hObject=0x98) returned 1 [0204.521] AreFileApisANSI () returned 1 [0204.521] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0204.650] CloseHandle (hObject=0x98) returned 1 [0204.651] AreFileApisANSI () returned 1 [0204.651] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0204.652] CloseHandle (hObject=0x98) returned 1 [0204.652] AreFileApisANSI () returned 1 [0204.652] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0204.847] CloseHandle (hObject=0x9c) returned 1 [0204.847] AreFileApisANSI () returned 1 [0204.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0204.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cfe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0204.848] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\07kHMJLuufSs9hAPVW8.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\07khmjluufss9hapvw8.ods"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\07kHMJLuufSs9hAPVW8.ods.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\07khmjluufss9hapvw8.ods.cryptoid"), dwFlags=0x2) returned 1 [0204.849] AreFileApisANSI () returned 1 [0204.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0205.140] CloseHandle (hObject=0x9c) returned 1 [0205.140] AreFileApisANSI () returned 1 [0205.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0205.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495ee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0205.141] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0ewvEw.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\0ewvew.mp3"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0ewvEw.mp3.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\0ewvew.mp3.cryptoid"), dwFlags=0x2) returned 1 [0205.141] AreFileApisANSI () returned 1 [0205.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0205.272] CloseHandle (hObject=0x9c) returned 1 [0205.272] AreFileApisANSI () returned 1 [0205.273] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0205.273] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cf38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0205.273] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0ZywTvjZ_BZnwytdK.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\0zywtvjz_bznwytdk.ods"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0ZywTvjZ_BZnwytdK.ods.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\0zywtvjz_bznwytdk.ods.cryptoid"), dwFlags=0x2) returned 1 [0205.273] AreFileApisANSI () returned 1 [0205.273] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0205.352] CloseHandle (hObject=0x9c) returned 1 [0205.353] AreFileApisANSI () returned 1 [0205.353] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0205.353] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495e08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0205.353] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\121gD.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\121gd.pptx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\121gD.pptx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\121gd.pptx.cryptoid"), dwFlags=0x2) returned 1 [0205.355] AreFileApisANSI () returned 1 [0205.355] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0205.400] CloseHandle (hObject=0x9c) returned 1 [0205.400] AreFileApisANSI () returned 1 [0205.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0205.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ccd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0205.400] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2axPeE-CZPf-RkzCI_hn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\2axpee-czpf-rkzci_hn.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2axPeE-CZPf-RkzCI_hn.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\2axpee-czpf-rkzci_hn.gif.cryptoid"), dwFlags=0x2) returned 1 [0205.402] AreFileApisANSI () returned 1 [0205.402] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0205.483] CloseHandle (hObject=0x9c) returned 1 [0205.485] AreFileApisANSI () returned 1 [0205.485] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0205.485] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495d30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0205.485] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5GKwSaPtc.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\5gkwsaptc.odt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5GKwSaPtc.odt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\5gkwsaptc.odt.cryptoid"), dwFlags=0x2) returned 1 [0205.486] AreFileApisANSI () returned 1 [0205.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0205.575] CloseHandle (hObject=0x9c) returned 1 [0205.575] AreFileApisANSI () returned 1 [0205.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0205.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cfe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0205.576] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\78awS64ztgzvG0OCl.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\78aws64ztgzvg0ocl.bmp"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\78awS64ztgzvG0OCl.bmp.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\78aws64ztgzvg0ocl.bmp.cryptoid"), dwFlags=0x2) returned 1 [0205.577] AreFileApisANSI () returned 1 [0205.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0205.599] CloseHandle (hObject=0x9c) returned 1 [0205.600] AreFileApisANSI () returned 1 [0205.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0205.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cdd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0205.600] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\7pUxFZKZ-Y3qsUDGLVF.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\7puxfzkz-y3qsudglvf.ots"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\7pUxFZKZ-Y3qsUDGLVF.ots.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\7puxfzkz-y3qsudglvf.ots.cryptoid"), dwFlags=0x2) returned 1 [0205.601] AreFileApisANSI () returned 1 [0205.601] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0205.657] CloseHandle (hObject=0x9c) returned 1 [0205.657] AreFileApisANSI () returned 1 [0205.657] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0205.657] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495a60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0205.657] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\9hAL0iz.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\9hal0iz.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\9hAL0iz.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\9hal0iz.jpg.cryptoid"), dwFlags=0x2) returned 1 [0205.658] AreFileApisANSI () returned 1 [0205.658] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cdd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0205.661] GetFileType (hFile=0x9c) returned 0x1 [0205.661] CloseHandle (hObject=0x9c) returned 1 [0205.662] AreFileApisANSI () returned 1 [0205.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0205.662] CloseHandle (hObject=0x9c) returned 1 [0205.663] AreFileApisANSI () returned 1 [0205.663] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0205.664] CloseHandle (hObject=0x9c) returned 1 [0205.664] AreFileApisANSI () returned 1 [0205.664] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0205.665] CloseHandle (hObject=0xa0) returned 1 [0205.665] AreFileApisANSI () returned 1 [0205.665] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0205.666] CloseHandle (hObject=0xa0) returned 1 [0205.666] AreFileApisANSI () returned 1 [0205.666] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0205.668] CloseHandle (hObject=0xa0) returned 1 [0205.668] AreFileApisANSI () returned 1 [0205.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0205.669] CloseHandle (hObject=0xa4) returned 1 [0205.669] AreFileApisANSI () returned 1 [0205.669] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0205.671] CloseHandle (hObject=0xa4) returned 1 [0205.672] AreFileApisANSI () returned 1 [0205.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0205.672] CloseHandle (hObject=0xa4) returned 1 [0205.673] AreFileApisANSI () returned 1 [0205.673] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0205.674] CloseHandle (hObject=0xa8) returned 1 [0205.675] AreFileApisANSI () returned 1 [0205.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0205.675] CloseHandle (hObject=0xa8) returned 1 [0205.676] AreFileApisANSI () returned 1 [0205.676] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0205.678] CloseHandle (hObject=0xa8) returned 1 [0205.678] AreFileApisANSI () returned 1 [0205.678] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0205.679] CloseHandle (hObject=0xa8) returned 1 [0205.679] AreFileApisANSI () returned 1 [0205.679] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0205.680] CloseHandle (hObject=0xa8) returned 1 [0205.681] AreFileApisANSI () returned 1 [0205.681] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0205.682] CloseHandle (hObject=0xa8) returned 1 [0205.683] AreFileApisANSI () returned 1 [0205.683] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0205.683] GetFileType (hFile=0xa8) returned 0x1 [0205.684] CloseHandle (hObject=0xa8) returned 1 [0205.684] AreFileApisANSI () returned 1 [0205.684] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4982a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0205.686] CloseHandle (hObject=0xa8) returned 1 [0205.686] AreFileApisANSI () returned 1 [0205.686] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497d28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0205.687] CloseHandle (hObject=0xa8) returned 1 [0205.687] AreFileApisANSI () returned 1 [0205.687] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4980a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0205.688] CloseHandle (hObject=0xa8) returned 1 [0205.689] AreFileApisANSI () returned 1 [0205.689] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0205.691] CloseHandle (hObject=0xa8) returned 1 [0205.691] AreFileApisANSI () returned 1 [0205.691] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0205.692] CloseHandle (hObject=0xa8) returned 1 [0205.692] AreFileApisANSI () returned 1 [0205.692] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4988a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0205.695] CloseHandle (hObject=0xac) returned 1 [0205.695] AreFileApisANSI () returned 1 [0205.695] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4982a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0205.696] CloseHandle (hObject=0xac) returned 1 [0205.697] AreFileApisANSI () returned 1 [0205.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ca8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0205.698] CloseHandle (hObject=0xac) returned 1 [0205.698] AreFileApisANSI () returned 1 [0205.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0205.700] CloseHandle (hObject=0xa0) returned 1 [0205.704] AreFileApisANSI () returned 1 [0205.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0205.706] CloseHandle (hObject=0xa0) returned 1 [0205.706] AreFileApisANSI () returned 1 [0205.706] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0205.707] CloseHandle (hObject=0xa0) returned 1 [0205.708] AreFileApisANSI () returned 1 [0205.708] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0205.709] GetFileType (hFile=0xa4) returned 0x1 [0205.709] CloseHandle (hObject=0xa4) returned 1 [0205.710] AreFileApisANSI () returned 1 [0205.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0205.712] CloseHandle (hObject=0xa4) returned 1 [0205.712] AreFileApisANSI () returned 1 [0205.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4989a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0205.713] CloseHandle (hObject=0xa4) returned 1 [0205.713] AreFileApisANSI () returned 1 [0205.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4987a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0205.714] CloseHandle (hObject=0xa8) returned 1 [0205.714] AreFileApisANSI () returned 1 [0205.714] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0205.715] CloseHandle (hObject=0xa8) returned 1 [0205.715] AreFileApisANSI () returned 1 [0205.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4983a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0205.718] CloseHandle (hObject=0xa8) returned 1 [0205.718] AreFileApisANSI () returned 1 [0205.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4981a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0205.719] CloseHandle (hObject=0xa4) returned 1 [0205.719] AreFileApisANSI () returned 1 [0205.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0205.721] CloseHandle (hObject=0xa4) returned 1 [0205.722] AreFileApisANSI () returned 1 [0205.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0205.723] CloseHandle (hObject=0xa4) returned 1 [0205.723] AreFileApisANSI () returned 1 [0205.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0205.724] CloseHandle (hObject=0xa0) returned 1 [0205.725] AreFileApisANSI () returned 1 [0205.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0205.726] CloseHandle (hObject=0xa0) returned 1 [0205.726] AreFileApisANSI () returned 1 [0205.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0205.728] CloseHandle (hObject=0xa0) returned 1 [0205.728] AreFileApisANSI () returned 1 [0205.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0205.729] CloseHandle (hObject=0xa0) returned 1 [0205.730] AreFileApisANSI () returned 1 [0205.730] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0205.731] CloseHandle (hObject=0xa0) returned 1 [0205.731] AreFileApisANSI () returned 1 [0205.731] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0205.734] CloseHandle (hObject=0xa0) returned 1 [0205.735] AreFileApisANSI () returned 1 [0205.735] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0205.737] CloseHandle (hObject=0xa0) returned 1 [0205.737] AreFileApisANSI () returned 1 [0205.737] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0205.738] CloseHandle (hObject=0xa0) returned 1 [0205.738] AreFileApisANSI () returned 1 [0205.738] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0205.739] CloseHandle (hObject=0xa0) returned 1 [0205.740] AreFileApisANSI () returned 1 [0205.740] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0205.741] CloseHandle (hObject=0xa4) returned 1 [0205.741] AreFileApisANSI () returned 1 [0205.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4985a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0205.742] CloseHandle (hObject=0xa4) returned 1 [0205.742] AreFileApisANSI () returned 1 [0205.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0205.743] CloseHandle (hObject=0xa4) returned 1 [0205.744] AreFileApisANSI () returned 1 [0205.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0205.744] GetFileType (hFile=0xa0) returned 0x1 [0205.745] CloseHandle (hObject=0xa0) returned 1 [0205.745] AreFileApisANSI () returned 1 [0205.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0205.746] CloseHandle (hObject=0xa0) returned 1 [0205.746] AreFileApisANSI () returned 1 [0205.746] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0205.748] CloseHandle (hObject=0xa0) returned 1 [0205.749] AreFileApisANSI () returned 1 [0205.749] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0205.750] CloseHandle (hObject=0xa4) returned 1 [0205.750] AreFileApisANSI () returned 1 [0205.750] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0205.752] CloseHandle (hObject=0xa4) returned 1 [0205.753] AreFileApisANSI () returned 1 [0205.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0205.753] CloseHandle (hObject=0xa4) returned 1 [0205.754] AreFileApisANSI () returned 1 [0205.754] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0205.775] CloseHandle (hObject=0x9c) returned 1 [0205.776] AreFileApisANSI () returned 1 [0205.776] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0205.776] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0205.776] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\BQLJq.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\bqljq.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\BQLJq.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\bqljq.wav.cryptoid"), dwFlags=0x2) returned 1 [0205.777] AreFileApisANSI () returned 1 [0205.777] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0205.813] CloseHandle (hObject=0x9c) returned 1 [0205.813] AreFileApisANSI () returned 1 [0205.813] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0205.813] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0205.813] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\bU0QBDrN2FL3eI.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\bu0qbdrn2fl3ei.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\bU0QBDrN2FL3eI.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\bu0qbdrn2fl3ei.gif.cryptoid"), dwFlags=0x2) returned 1 [0205.815] AreFileApisANSI () returned 1 [0205.815] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0205.836] CloseHandle (hObject=0x9c) returned 1 [0205.836] AreFileApisANSI () returned 1 [0205.836] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0205.836] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0205.836] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\c2Q 8Pg4Uu8W_JsZ8-.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\c2q 8pg4uu8w_jsz8-.mkv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\c2Q 8Pg4Uu8W_JsZ8-.mkv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\c2q 8pg4uu8w_jsz8-.mkv.cryptoid"), dwFlags=0x2) returned 1 [0205.838] AreFileApisANSI () returned 1 [0205.838] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0205.841] CloseHandle (hObject=0x9c) returned 1 [0205.841] AreFileApisANSI () returned 1 [0205.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0205.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495c58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0205.842] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cxsYNxI6Dy.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\cxsynxi6dy.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cxsYNxI6Dy.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\cxsynxi6dy.wav.cryptoid"), dwFlags=0x2) returned 1 [0205.843] AreFileApisANSI () returned 1 [0205.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0205.911] CloseHandle (hObject=0x9c) returned 1 [0205.912] AreFileApisANSI () returned 1 [0205.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0205.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0205.912] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\DBf6L1iPO_VS3GTSTa.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\dbf6l1ipo_vs3gtsta.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\DBf6L1iPO_VS3GTSTa.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\dbf6l1ipo_vs3gtsta.png.cryptoid"), dwFlags=0x2) returned 1 [0205.913] AreFileApisANSI () returned 1 [0205.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0205.922] CloseHandle (hObject=0x9c) returned 1 [0205.923] AreFileApisANSI () returned 1 [0205.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0205.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d300, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0205.923] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\DqGAnp4OTgma8.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\dqganp4otgma8.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\DqGAnp4OTgma8.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\dqganp4otgma8.png.cryptoid"), dwFlags=0x2) returned 1 [0205.924] AreFileApisANSI () returned 1 [0205.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0205.955] CloseHandle (hObject=0x9c) returned 1 [0205.955] AreFileApisANSI () returned 1 [0205.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0205.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cdd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0205.956] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\H7psiKHKOoOE.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\h7psikhkoooe.m4a"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\H7psiKHKOoOE.m4a.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\h7psikhkoooe.m4a.cryptoid"), dwFlags=0x2) returned 1 [0205.956] AreFileApisANSI () returned 1 [0205.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0205.986] CloseHandle (hObject=0x9c) returned 1 [0205.986] AreFileApisANSI () returned 1 [0205.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0205.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0205.986] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hs0AKR.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\hs0akr.flv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hs0AKR.flv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\hs0akr.flv.cryptoid"), dwFlags=0x2) returned 1 [0205.987] AreFileApisANSI () returned 1 [0205.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0205.988] CloseHandle (hObject=0x9c) returned 1 [0205.988] AreFileApisANSI () returned 1 [0205.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0205.990] CloseHandle (hObject=0x9c) returned 1 [0205.990] AreFileApisANSI () returned 1 [0205.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0205.991] CloseHandle (hObject=0x9c) returned 1 [0205.992] AreFileApisANSI () returned 1 [0205.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0205.992] CloseHandle (hObject=0xa0) returned 1 [0205.993] AreFileApisANSI () returned 1 [0205.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0205.993] CloseHandle (hObject=0xa0) returned 1 [0205.994] AreFileApisANSI () returned 1 [0205.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0205.995] CloseHandle (hObject=0xa0) returned 1 [0205.996] AreFileApisANSI () returned 1 [0205.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0206.068] CloseHandle (hObject=0x9c) returned 1 [0206.069] AreFileApisANSI () returned 1 [0206.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0206.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495e98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0206.069] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\k4Ljhdejk.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\k4ljhdejk.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\k4Ljhdejk.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\k4ljhdejk.jpg.cryptoid"), dwFlags=0x2) returned 1 [0206.070] AreFileApisANSI () returned 1 [0206.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0206.116] CloseHandle (hObject=0x9c) returned 1 [0206.116] AreFileApisANSI () returned 1 [0206.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0206.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495e08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0206.116] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\KDva80WDNGd.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\kdva80wdngd.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\KDva80WDNGd.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\kdva80wdngd.jpg.cryptoid"), dwFlags=0x2) returned 1 [0206.117] AreFileApisANSI () returned 1 [0206.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0206.189] CloseHandle (hObject=0x9c) returned 1 [0206.190] AreFileApisANSI () returned 1 [0206.190] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0206.190] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495c10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0206.190] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K_51rclcA1I.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\k_51rclca1i.rtf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K_51rclcA1I.rtf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\k_51rclca1i.rtf.cryptoid"), dwFlags=0x2) returned 1 [0206.191] AreFileApisANSI () returned 1 [0206.191] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0206.192] CloseHandle (hObject=0x9c) returned 1 [0206.192] AreFileApisANSI () returned 1 [0206.192] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0206.194] CloseHandle (hObject=0x9c) returned 1 [0206.195] AreFileApisANSI () returned 1 [0206.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0206.195] CloseHandle (hObject=0x9c) returned 1 [0206.196] AreFileApisANSI () returned 1 [0206.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0206.198] CloseHandle (hObject=0xa0) returned 1 [0206.198] AreFileApisANSI () returned 1 [0206.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0206.199] CloseHandle (hObject=0xa0) returned 1 [0206.199] AreFileApisANSI () returned 1 [0206.199] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0206.200] CloseHandle (hObject=0xa0) returned 1 [0206.201] AreFileApisANSI () returned 1 [0206.201] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4986a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0206.201] GetFileType (hFile=0xa4) returned 0x1 [0206.202] CloseHandle (hObject=0xa4) returned 1 [0206.202] AreFileApisANSI () returned 1 [0206.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0206.204] CloseHandle (hObject=0xa4) returned 1 [0206.205] AreFileApisANSI () returned 1 [0206.205] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4989a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0206.206] CloseHandle (hObject=0xa4) returned 1 [0206.206] AreFileApisANSI () returned 1 [0206.206] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0206.207] CloseHandle (hObject=0xa8) returned 1 [0206.208] AreFileApisANSI () returned 1 [0206.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0206.209] CloseHandle (hObject=0xa8) returned 1 [0206.209] AreFileApisANSI () returned 1 [0206.209] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0206.211] CloseHandle (hObject=0xa8) returned 1 [0206.212] AreFileApisANSI () returned 1 [0206.212] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4981a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0206.213] CloseHandle (hObject=0xa4) returned 1 [0206.213] AreFileApisANSI () returned 1 [0206.213] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0206.215] CloseHandle (hObject=0xa4) returned 1 [0206.216] AreFileApisANSI () returned 1 [0206.216] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4983a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0206.218] CloseHandle (hObject=0xa4) returned 1 [0206.219] AreFileApisANSI () returned 1 [0206.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0206.220] CloseHandle (hObject=0xa8) returned 1 [0206.220] AreFileApisANSI () returned 1 [0206.220] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0206.221] CloseHandle (hObject=0xa8) returned 1 [0206.222] AreFileApisANSI () returned 1 [0206.222] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0206.226] CloseHandle (hObject=0xa8) returned 1 [0206.226] AreFileApisANSI () returned 1 [0206.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0206.227] CloseHandle (hObject=0xac) returned 1 [0206.228] AreFileApisANSI () returned 1 [0206.228] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0206.229] CloseHandle (hObject=0xac) returned 1 [0206.229] AreFileApisANSI () returned 1 [0206.229] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0206.231] CloseHandle (hObject=0xac) returned 1 [0206.232] AreFileApisANSI () returned 1 [0206.232] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0206.233] CloseHandle (hObject=0xb0) returned 1 [0206.234] AreFileApisANSI () returned 1 [0206.234] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0206.235] CloseHandle (hObject=0xb0) returned 1 [0206.235] AreFileApisANSI () returned 1 [0206.235] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0206.254] CloseHandle (hObject=0xb0) returned 1 [0206.433] AreFileApisANSI () returned 1 [0206.433] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0207.275] CloseHandle (hObject=0x9c) returned 1 [0207.275] AreFileApisANSI () returned 1 [0207.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0207.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d2a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0207.276] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\MGNTKXFP4qp1a wDFhwT.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mgntkxfp4qp1a wdfhwt.flv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\MGNTKXFP4qp1a wDFhwT.flv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mgntkxfp4qp1a wdfhwt.flv.cryptoid"), dwFlags=0x2) returned 1 [0207.279] AreFileApisANSI () returned 1 [0207.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0207.298] CloseHandle (hObject=0x9c) returned 1 [0207.299] AreFileApisANSI () returned 1 [0207.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0207.301] CloseHandle (hObject=0x9c) returned 1 [0207.301] AreFileApisANSI () returned 1 [0207.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0207.302] CloseHandle (hObject=0x9c) returned 1 [0207.303] AreFileApisANSI () returned 1 [0207.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0207.303] GetFileType (hFile=0xa0) returned 0x1 [0207.304] CloseHandle (hObject=0xa0) returned 1 [0207.305] AreFileApisANSI () returned 1 [0207.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0207.307] CloseHandle (hObject=0xa0) returned 1 [0207.308] AreFileApisANSI () returned 1 [0207.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0207.309] CloseHandle (hObject=0xa0) returned 1 [0207.309] AreFileApisANSI () returned 1 [0207.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0207.526] CloseHandle (hObject=0xa4) returned 1 [0207.527] AreFileApisANSI () returned 1 [0207.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0207.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0207.527] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb.cryptoid"), dwFlags=0x2) returned 1 [0207.528] AreFileApisANSI () returned 1 [0207.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0207.529] CloseHandle (hObject=0xa0) returned 1 [0207.529] AreFileApisANSI () returned 1 [0207.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0207.530] CloseHandle (hObject=0xa0) returned 1 [0207.530] AreFileApisANSI () returned 1 [0207.530] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0207.532] CloseHandle (hObject=0xa0) returned 1 [0207.533] AreFileApisANSI () returned 1 [0207.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0207.533] GetFileType (hFile=0xa0) returned 0x1 [0207.534] CloseHandle (hObject=0xa0) returned 1 [0207.534] AreFileApisANSI () returned 1 [0207.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0207.536] CloseHandle (hObject=0xa0) returned 1 [0207.537] AreFileApisANSI () returned 1 [0207.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0207.538] CloseHandle (hObject=0xa0) returned 1 [0207.538] AreFileApisANSI () returned 1 [0207.539] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498a28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0207.542] GetFileType (hFile=0xa4) returned 0x1 [0207.543] CloseHandle (hObject=0xa4) returned 1 [0207.544] AreFileApisANSI () returned 1 [0207.544] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4985a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0207.545] CloseHandle (hObject=0xa4) returned 1 [0207.545] AreFileApisANSI () returned 1 [0207.545] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498828, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0207.546] CloseHandle (hObject=0xa4) returned 1 [0207.547] AreFileApisANSI () returned 1 [0207.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0207.548] CloseHandle (hObject=0xa0) returned 1 [0207.549] AreFileApisANSI () returned 1 [0207.549] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0207.550] CloseHandle (hObject=0xa0) returned 1 [0207.550] AreFileApisANSI () returned 1 [0207.550] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0207.553] CloseHandle (hObject=0xa0) returned 1 [0207.554] AreFileApisANSI () returned 1 [0207.554] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0207.555] CloseHandle (hObject=0xa0) returned 1 [0207.556] AreFileApisANSI () returned 1 [0207.556] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0207.557] CloseHandle (hObject=0xa0) returned 1 [0207.558] AreFileApisANSI () returned 1 [0207.558] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0207.561] CloseHandle (hObject=0xa0) returned 1 [0207.562] AreFileApisANSI () returned 1 [0207.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0207.564] CloseHandle (hObject=0xa4) returned 1 [0207.565] AreFileApisANSI () returned 1 [0207.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0207.568] CloseHandle (hObject=0xa4) returned 1 [0207.569] AreFileApisANSI () returned 1 [0207.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0207.571] CloseHandle (hObject=0xa4) returned 1 [0207.572] AreFileApisANSI () returned 1 [0207.572] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0207.576] GetFileType (hFile=0xa8) returned 0x1 [0207.578] CloseHandle (hObject=0xa8) returned 1 [0207.578] AreFileApisANSI () returned 1 [0207.578] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0207.580] CloseHandle (hObject=0xa8) returned 1 [0207.581] AreFileApisANSI () returned 1 [0207.581] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0207.582] CloseHandle (hObject=0xa8) returned 1 [0207.583] AreFileApisANSI () returned 1 [0207.583] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0207.584] GetFileType (hFile=0xa0) returned 0x1 [0207.585] CloseHandle (hObject=0xa0) returned 1 [0207.586] AreFileApisANSI () returned 1 [0207.586] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4985a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0207.590] CloseHandle (hObject=0xa0) returned 1 [0207.590] AreFileApisANSI () returned 1 [0207.590] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0207.592] CloseHandle (hObject=0xa0) returned 1 [0207.592] AreFileApisANSI () returned 1 [0207.592] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0207.594] CloseHandle (hObject=0xa4) returned 1 [0207.594] AreFileApisANSI () returned 1 [0207.595] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4985a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0207.596] CloseHandle (hObject=0xa4) returned 1 [0207.597] AreFileApisANSI () returned 1 [0207.597] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4982a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0207.599] CloseHandle (hObject=0xa4) returned 1 [0207.600] AreFileApisANSI () returned 1 [0207.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0207.601] GetFileType (hFile=0xa8) returned 0x1 [0207.602] CloseHandle (hObject=0xa8) returned 1 [0207.603] AreFileApisANSI () returned 1 [0207.603] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0207.691] CloseHandle (hObject=0xa8) returned 1 [0207.692] AreFileApisANSI () returned 1 [0207.692] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0207.693] CloseHandle (hObject=0xa8) returned 1 [0207.694] AreFileApisANSI () returned 1 [0207.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0208.422] CloseHandle (hObject=0xac) returned 1 [0208.423] AreFileApisANSI () returned 1 [0208.423] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0208.423] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a33e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0208.423] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx.cryptoid"), dwFlags=0x2) returned 1 [0208.425] AreFileApisANSI () returned 1 [0208.425] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0208.426] GetFileType (hFile=0xa0) returned 0x1 [0208.427] CloseHandle (hObject=0xa0) returned 1 [0208.427] AreFileApisANSI () returned 1 [0208.427] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0208.428] CloseHandle (hObject=0xa0) returned 1 [0208.428] AreFileApisANSI () returned 1 [0208.428] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0208.430] CloseHandle (hObject=0xa0) returned 1 [0208.431] AreFileApisANSI () returned 1 [0208.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0208.432] CloseHandle (hObject=0xa4) returned 1 [0208.432] AreFileApisANSI () returned 1 [0208.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0208.433] CloseHandle (hObject=0xa4) returned 1 [0208.434] AreFileApisANSI () returned 1 [0208.434] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0208.436] CloseHandle (hObject=0xa4) returned 1 [0208.436] AreFileApisANSI () returned 1 [0208.436] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4982a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0208.438] CloseHandle (hObject=0xa0) returned 1 [0208.439] AreFileApisANSI () returned 1 [0208.439] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ca8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0208.440] CloseHandle (hObject=0xa0) returned 1 [0208.441] AreFileApisANSI () returned 1 [0208.441] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4980a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0208.442] CloseHandle (hObject=0xa0) returned 1 [0208.442] AreFileApisANSI () returned 1 [0208.442] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0208.443] CloseHandle (hObject=0xa4) returned 1 [0208.444] AreFileApisANSI () returned 1 [0208.444] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0208.445] CloseHandle (hObject=0xa4) returned 1 [0208.446] AreFileApisANSI () returned 1 [0208.446] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0208.447] CloseHandle (hObject=0xa4) returned 1 [0208.447] AreFileApisANSI () returned 1 [0208.447] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0208.451] CloseHandle (hObject=0xa8) returned 1 [0208.452] AreFileApisANSI () returned 1 [0208.452] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0208.453] CloseHandle (hObject=0xa8) returned 1 [0208.454] AreFileApisANSI () returned 1 [0208.454] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0208.456] CloseHandle (hObject=0xa8) returned 1 [0208.457] AreFileApisANSI () returned 1 [0208.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0208.458] CloseHandle (hObject=0xac) returned 1 [0208.459] AreFileApisANSI () returned 1 [0208.459] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0208.461] CloseHandle (hObject=0xac) returned 1 [0208.462] AreFileApisANSI () returned 1 [0208.462] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5838, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 134 [0208.465] CloseHandle (hObject=0xac) returned 1 [0208.466] AreFileApisANSI () returned 1 [0208.466] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0208.468] CloseHandle (hObject=0xac) returned 1 [0208.469] AreFileApisANSI () returned 1 [0208.469] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0208.471] CloseHandle (hObject=0xac) returned 1 [0208.472] AreFileApisANSI () returned 1 [0208.472] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0208.474] CloseHandle (hObject=0xac) returned 1 [0208.475] AreFileApisANSI () returned 1 [0208.475] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498528, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0208.476] CloseHandle (hObject=0xa4) returned 1 [0208.477] AreFileApisANSI () returned 1 [0208.477] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497e28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0208.478] CloseHandle (hObject=0xa4) returned 1 [0208.479] AreFileApisANSI () returned 1 [0208.479] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4986a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0208.481] CloseHandle (hObject=0xa4) returned 1 [0208.482] AreFileApisANSI () returned 1 [0208.482] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0208.483] CloseHandle (hObject=0xa8) returned 1 [0208.483] AreFileApisANSI () returned 1 [0208.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0208.484] CloseHandle (hObject=0xa8) returned 1 [0208.485] AreFileApisANSI () returned 1 [0208.485] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0208.499] CloseHandle (hObject=0xa8) returned 1 [0208.500] AreFileApisANSI () returned 1 [0208.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0208.501] CloseHandle (hObject=0xa0) returned 1 [0208.501] AreFileApisANSI () returned 1 [0208.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0208.502] CloseHandle (hObject=0xa0) returned 1 [0208.503] AreFileApisANSI () returned 1 [0208.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0208.505] CloseHandle (hObject=0xa0) returned 1 [0208.506] AreFileApisANSI () returned 1 [0208.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0208.508] CloseHandle (hObject=0xa0) returned 1 [0208.509] AreFileApisANSI () returned 1 [0208.509] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0208.510] CloseHandle (hObject=0xa0) returned 1 [0208.510] AreFileApisANSI () returned 1 [0208.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0208.513] CloseHandle (hObject=0xa0) returned 1 [0208.514] AreFileApisANSI () returned 1 [0208.514] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0208.515] CloseHandle (hObject=0xa4) returned 1 [0208.515] AreFileApisANSI () returned 1 [0208.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0208.517] CloseHandle (hObject=0xa4) returned 1 [0208.517] AreFileApisANSI () returned 1 [0208.517] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0208.519] CloseHandle (hObject=0xa4) returned 1 [0208.520] AreFileApisANSI () returned 1 [0208.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498428, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0208.521] CloseHandle (hObject=0xa8) returned 1 [0208.522] AreFileApisANSI () returned 1 [0208.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4986a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0208.523] CloseHandle (hObject=0xa8) returned 1 [0208.524] AreFileApisANSI () returned 1 [0208.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4982a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0208.526] CloseHandle (hObject=0xa8) returned 1 [0208.527] AreFileApisANSI () returned 1 [0208.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0208.529] CloseHandle (hObject=0xa0) returned 1 [0208.529] AreFileApisANSI () returned 1 [0208.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0208.530] CloseHandle (hObject=0xa0) returned 1 [0208.531] AreFileApisANSI () returned 1 [0208.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0208.533] CloseHandle (hObject=0xa0) returned 1 [0208.534] AreFileApisANSI () returned 1 [0208.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498228, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0208.535] CloseHandle (hObject=0xa4) returned 1 [0208.536] AreFileApisANSI () returned 1 [0208.536] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0208.537] CloseHandle (hObject=0xa4) returned 1 [0208.537] AreFileApisANSI () returned 1 [0208.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4987a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0208.540] CloseHandle (hObject=0xa4) returned 1 [0208.540] AreFileApisANSI () returned 1 [0208.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0208.543] CloseHandle (hObject=0xa8) returned 1 [0208.544] AreFileApisANSI () returned 1 [0208.544] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0208.545] CloseHandle (hObject=0xa8) returned 1 [0208.546] AreFileApisANSI () returned 1 [0208.546] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4980a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0208.548] CloseHandle (hObject=0xa8) returned 1 [0208.548] AreFileApisANSI () returned 1 [0208.549] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0208.550] CloseHandle (hObject=0xac) returned 1 [0208.550] AreFileApisANSI () returned 1 [0208.550] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0208.553] CloseHandle (hObject=0xac) returned 1 [0208.553] AreFileApisANSI () returned 1 [0208.553] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0208.555] CloseHandle (hObject=0xac) returned 1 [0208.555] AreFileApisANSI () returned 1 [0208.555] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0208.556] CloseHandle (hObject=0xa0) returned 1 [0208.557] AreFileApisANSI () returned 1 [0208.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0208.558] CloseHandle (hObject=0xa0) returned 1 [0208.558] AreFileApisANSI () returned 1 [0208.558] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0208.561] CloseHandle (hObject=0xa0) returned 1 [0208.561] AreFileApisANSI () returned 1 [0208.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0208.565] CloseHandle (hObject=0xa4) returned 1 [0208.566] AreFileApisANSI () returned 1 [0208.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0208.567] CloseHandle (hObject=0xa4) returned 1 [0208.567] AreFileApisANSI () returned 1 [0208.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0208.568] CloseHandle (hObject=0xa4) returned 1 [0208.569] AreFileApisANSI () returned 1 [0208.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0208.570] CloseHandle (hObject=0xa8) returned 1 [0208.571] AreFileApisANSI () returned 1 [0208.571] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0208.571] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0208.571] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat.cryptoid"), dwFlags=0x2) returned 1 [0208.572] AreFileApisANSI () returned 1 [0208.572] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0208.574] GetFileType (hFile=0xa0) returned 0x1 [0208.575] CloseHandle (hObject=0xa0) returned 1 [0208.575] AreFileApisANSI () returned 1 [0208.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0208.577] CloseHandle (hObject=0xa0) returned 1 [0208.577] AreFileApisANSI () returned 1 [0208.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0208.580] CloseHandle (hObject=0xa0) returned 1 [0208.580] AreFileApisANSI () returned 1 [0208.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0208.582] CloseHandle (hObject=0xa4) returned 1 [0208.582] AreFileApisANSI () returned 1 [0208.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0208.585] CloseHandle (hObject=0xa4) returned 1 [0208.585] AreFileApisANSI () returned 1 [0208.586] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0208.587] CloseHandle (hObject=0xa4) returned 1 [0208.587] AreFileApisANSI () returned 1 [0208.587] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0208.595] CloseHandle (hObject=0xa8) returned 1 [0208.596] AreFileApisANSI () returned 1 [0208.596] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0208.596] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0208.596] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat.cryptoid"), dwFlags=0x2) returned 1 [0208.597] AreFileApisANSI () returned 1 [0208.597] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0208.598] GetFileType (hFile=0xa0) returned 0x1 [0208.599] CloseHandle (hObject=0xa0) returned 1 [0208.599] AreFileApisANSI () returned 1 [0208.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0208.600] CloseHandle (hObject=0xa0) returned 1 [0208.601] AreFileApisANSI () returned 1 [0208.601] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0208.603] CloseHandle (hObject=0xa0) returned 1 [0208.604] AreFileApisANSI () returned 1 [0208.604] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0208.605] CloseHandle (hObject=0xa0) returned 1 [0208.605] AreFileApisANSI () returned 1 [0208.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0208.606] CloseHandle (hObject=0xa0) returned 1 [0208.607] AreFileApisANSI () returned 1 [0208.607] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0208.609] CloseHandle (hObject=0xa0) returned 1 [0208.609] AreFileApisANSI () returned 1 [0208.609] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0208.611] CloseHandle (hObject=0xa0) returned 1 [0208.611] AreFileApisANSI () returned 1 [0208.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0208.613] CloseHandle (hObject=0xa0) returned 1 [0208.613] AreFileApisANSI () returned 1 [0208.613] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0208.615] CloseHandle (hObject=0xa0) returned 1 [0208.616] AreFileApisANSI () returned 1 [0208.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0208.619] CloseHandle (hObject=0xa0) returned 1 [0208.619] AreFileApisANSI () returned 1 [0208.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0208.621] CloseHandle (hObject=0xa0) returned 1 [0208.622] AreFileApisANSI () returned 1 [0208.622] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0208.623] CloseHandle (hObject=0xa0) returned 1 [0208.624] AreFileApisANSI () returned 1 [0208.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0208.625] CloseHandle (hObject=0xa4) returned 1 [0208.625] AreFileApisANSI () returned 1 [0208.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0208.626] CloseHandle (hObject=0xa4) returned 1 [0208.627] AreFileApisANSI () returned 1 [0208.627] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0208.628] CloseHandle (hObject=0xa4) returned 1 [0208.629] AreFileApisANSI () returned 1 [0208.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0208.630] CloseHandle (hObject=0xa0) returned 1 [0208.630] AreFileApisANSI () returned 1 [0208.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0208.632] CloseHandle (hObject=0xa0) returned 1 [0208.632] AreFileApisANSI () returned 1 [0208.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0208.635] CloseHandle (hObject=0xa0) returned 1 [0208.635] AreFileApisANSI () returned 1 [0208.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498128, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0208.636] CloseHandle (hObject=0xa0) returned 1 [0208.637] AreFileApisANSI () returned 1 [0208.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498128, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0208.639] CloseHandle (hObject=0xa0) returned 1 [0208.640] AreFileApisANSI () returned 1 [0208.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498b28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0208.641] CloseHandle (hObject=0xa0) returned 1 [0208.642] AreFileApisANSI () returned 1 [0208.642] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0208.643] CloseHandle (hObject=0xa0) returned 1 [0208.643] AreFileApisANSI () returned 1 [0208.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0208.645] CloseHandle (hObject=0xa0) returned 1 [0208.645] AreFileApisANSI () returned 1 [0208.645] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0208.648] CloseHandle (hObject=0xa0) returned 1 [0208.648] AreFileApisANSI () returned 1 [0208.648] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0208.650] CloseHandle (hObject=0xa0) returned 1 [0208.650] AreFileApisANSI () returned 1 [0208.650] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498a28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0208.654] CloseHandle (hObject=0xa0) returned 1 [0208.655] AreFileApisANSI () returned 1 [0208.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4985a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0208.656] CloseHandle (hObject=0xa0) returned 1 [0208.657] AreFileApisANSI () returned 1 [0208.657] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4984a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0208.660] CloseHandle (hObject=0xa4) returned 1 [0208.660] AreFileApisANSI () returned 1 [0208.660] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0208.661] CloseHandle (hObject=0xa4) returned 1 [0208.662] AreFileApisANSI () returned 1 [0208.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0208.663] CloseHandle (hObject=0xa4) returned 1 [0208.664] AreFileApisANSI () returned 1 [0208.664] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0208.665] CloseHandle (hObject=0xa8) returned 1 [0208.666] AreFileApisANSI () returned 1 [0208.666] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0208.667] CloseHandle (hObject=0xa8) returned 1 [0208.668] AreFileApisANSI () returned 1 [0208.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0208.671] CloseHandle (hObject=0xa8) returned 1 [0208.671] AreFileApisANSI () returned 1 [0208.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498828, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0208.673] CloseHandle (hObject=0xa8) returned 1 [0208.673] AreFileApisANSI () returned 1 [0208.673] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0208.674] CloseHandle (hObject=0xa8) returned 1 [0208.675] AreFileApisANSI () returned 1 [0208.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4984a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0208.677] CloseHandle (hObject=0xa8) returned 1 [0208.678] AreFileApisANSI () returned 1 [0208.678] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498528, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0208.680] CloseHandle (hObject=0xa8) returned 1 [0208.680] AreFileApisANSI () returned 1 [0208.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498528, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0208.681] CloseHandle (hObject=0xa8) returned 1 [0208.682] AreFileApisANSI () returned 1 [0208.682] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4983a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0208.684] CloseHandle (hObject=0xa8) returned 1 [0208.685] AreFileApisANSI () returned 1 [0208.685] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0208.689] CloseHandle (hObject=0xa0) returned 1 [0208.689] AreFileApisANSI () returned 1 [0208.689] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0208.691] CloseHandle (hObject=0xa0) returned 1 [0208.691] AreFileApisANSI () returned 1 [0208.691] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0208.692] CloseHandle (hObject=0xa0) returned 1 [0208.693] AreFileApisANSI () returned 1 [0208.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0209.888] CloseHandle (hObject=0xa4) returned 1 [0209.888] AreFileApisANSI () returned 1 [0209.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0209.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0209.888] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm.cryptoid"), dwFlags=0x2) returned 1 [0209.889] AreFileApisANSI () returned 1 [0209.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0210.604] CloseHandle (hObject=0xa4) returned 1 [0210.604] AreFileApisANSI () returned 1 [0210.604] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0210.604] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0210.604] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm.cryptoid"), dwFlags=0x2) returned 1 [0210.605] AreFileApisANSI () returned 1 [0210.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0211.369] CloseHandle (hObject=0xa4) returned 1 [0211.370] AreFileApisANSI () returned 1 [0211.370] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0211.370] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0211.370] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm.cryptoid"), dwFlags=0x2) returned 1 [0211.371] AreFileApisANSI () returned 1 [0211.371] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0211.377] CloseHandle (hObject=0xa4) returned 1 [0211.377] AreFileApisANSI () returned 1 [0211.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0211.378] CloseHandle (hObject=0xa4) returned 1 [0211.379] AreFileApisANSI () returned 1 [0211.379] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ca8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0211.383] CloseHandle (hObject=0xa4) returned 1 [0211.383] AreFileApisANSI () returned 1 [0211.383] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0211.384] CloseHandle (hObject=0xa8) returned 1 [0211.385] AreFileApisANSI () returned 1 [0211.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0211.386] CloseHandle (hObject=0xa8) returned 1 [0211.386] AreFileApisANSI () returned 1 [0211.386] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0211.389] CloseHandle (hObject=0xa8) returned 1 [0211.390] AreFileApisANSI () returned 1 [0211.390] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0211.393] GetFileType (hFile=0xac) returned 0x1 [0211.405] CloseHandle (hObject=0xac) returned 1 [0211.406] AreFileApisANSI () returned 1 [0211.406] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0211.409] CloseHandle (hObject=0xac) returned 1 [0211.410] AreFileApisANSI () returned 1 [0211.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0211.410] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0211.411] GetFileType (hFile=0xac) returned 0x1 [0211.411] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0211.412] CloseHandle (hObject=0xac) returned 1 [0211.412] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\*", lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0x494ee0 [0211.412] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0211.412] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0211.413] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0211.413] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0211.413] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0211.413] AreFileApisANSI () returned 1 [0211.413] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0211.413] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0211.414] GetFileType (hFile=0xb0) returned 0x1 [0211.414] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0211.416] CloseHandle (hObject=0xb0) returned 1 [0211.416] AreFileApisANSI () returned 1 [0211.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0211.416] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0211.425] GetFileType (hFile=0xb0) returned 0x1 [0211.425] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0211.426] CloseHandle (hObject=0xb0) returned 1 [0211.427] AreFileApisANSI () returned 1 [0211.427] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0211.427] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0211.427] GetFileType (hFile=0xb0) returned 0x1 [0211.428] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0211.428] CloseHandle (hObject=0xb0) returned 1 [0211.429] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\*", lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 0x494960 [0211.429] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.429] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.429] AreFileApisANSI () returned 1 [0211.429] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0211.429] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0211.433] GetFileType (hFile=0xb4) returned 0x1 [0211.433] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0211.434] CloseHandle (hObject=0xb4) returned 1 [0211.434] AreFileApisANSI () returned 1 [0211.434] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0211.434] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0211.435] GetFileType (hFile=0xb4) returned 0x1 [0211.435] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0211.436] CloseHandle (hObject=0xb4) returned 1 [0211.436] AreFileApisANSI () returned 1 [0211.436] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0211.436] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0211.437] GetFileType (hFile=0xb4) returned 0x1 [0211.437] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0211.438] CloseHandle (hObject=0xb4) returned 1 [0211.438] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\*", lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0x494e20 [0211.438] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.441] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.441] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.441] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.441] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.441] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.441] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.441] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.441] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.441] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.441] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.442] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.442] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.442] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.442] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.442] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.442] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.442] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.442] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.442] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.442] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.442] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.442] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.442] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.442] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.443] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.443] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.443] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.443] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0 [0211.443] FindClose (in: hFindFile=0x494e20 | out: hFindFile=0x494e20) returned 1 [0211.443] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.443] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.443] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.444] FindNextFileA (in: hFindFile=0x494960, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 0 [0211.444] FindClose (in: hFindFile=0x494960 | out: hFindFile=0x494960) returned 1 [0211.444] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0211.444] AreFileApisANSI () returned 1 [0211.444] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0211.444] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0211.447] GetFileType (hFile=0xb0) returned 0x1 [0211.447] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0211.448] CloseHandle (hObject=0xb0) returned 1 [0211.448] AreFileApisANSI () returned 1 [0211.448] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0211.448] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0211.452] GetFileType (hFile=0xb0) returned 0x1 [0211.452] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0211.453] CloseHandle (hObject=0xb0) returned 1 [0211.454] AreFileApisANSI () returned 1 [0211.454] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0211.454] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0211.454] GetFileType (hFile=0xb0) returned 0x1 [0211.454] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0211.455] CloseHandle (hObject=0xb0) returned 1 [0211.456] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\*", lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 0x4948a0 [0211.456] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.456] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.456] AreFileApisANSI () returned 1 [0211.456] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0211.456] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0211.459] GetFileType (hFile=0xb4) returned 0x1 [0211.460] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0211.460] CloseHandle (hObject=0xb4) returned 1 [0211.461] AreFileApisANSI () returned 1 [0211.461] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0211.461] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0211.462] GetFileType (hFile=0xb4) returned 0x1 [0211.510] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0211.511] CloseHandle (hObject=0xb4) returned 1 [0211.511] AreFileApisANSI () returned 1 [0211.511] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 126 [0211.511] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0211.512] GetFileType (hFile=0xb4) returned 0x1 [0211.512] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0211.513] CloseHandle (hObject=0xb4) returned 1 [0211.513] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\*", lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0x494c20 [0211.513] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.519] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.519] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.519] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.520] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.520] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.520] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.520] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.520] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.520] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.520] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.520] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.520] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.520] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.520] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.520] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.520] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.520] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.520] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.520] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.521] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.521] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0 [0211.521] FindClose (in: hFindFile=0x494c20 | out: hFindFile=0x494c20) returned 1 [0211.521] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.521] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.521] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.521] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 0 [0211.521] FindClose (in: hFindFile=0x4948a0 | out: hFindFile=0x4948a0) returned 1 [0211.522] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0 [0211.522] FindClose (in: hFindFile=0x494ee0 | out: hFindFile=0x494ee0) returned 1 [0211.522] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0211.522] AreFileApisANSI () returned 1 [0211.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0211.522] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0211.523] GetFileType (hFile=0xac) returned 0x1 [0211.523] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0211.524] CloseHandle (hObject=0xac) returned 1 [0211.524] AreFileApisANSI () returned 1 [0211.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0211.525] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0211.527] GetFileType (hFile=0xac) returned 0x1 [0211.527] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0211.528] CloseHandle (hObject=0xac) returned 1 [0211.529] AreFileApisANSI () returned 1 [0211.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0211.529] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0211.529] GetFileType (hFile=0xac) returned 0x1 [0211.529] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0211.531] CloseHandle (hObject=0xac) returned 1 [0211.531] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\*", lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0x494d20 [0211.531] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0211.531] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0211.531] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0211.531] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0211.531] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0211.531] AreFileApisANSI () returned 1 [0211.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0211.532] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0211.532] GetFileType (hFile=0xb0) returned 0x1 [0211.532] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0211.533] CloseHandle (hObject=0xb0) returned 1 [0211.534] AreFileApisANSI () returned 1 [0211.534] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0211.534] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0211.537] GetFileType (hFile=0xb0) returned 0x1 [0211.537] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0211.538] CloseHandle (hObject=0xb0) returned 1 [0211.538] AreFileApisANSI () returned 1 [0211.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fb70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0211.538] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0211.539] GetFileType (hFile=0xb0) returned 0x1 [0211.539] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0211.540] CloseHandle (hObject=0xb0) returned 1 [0211.541] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\*", lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 0x494aa0 [0211.541] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.541] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.541] AreFileApisANSI () returned 1 [0211.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0211.541] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\1033\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0211.542] GetFileType (hFile=0xb4) returned 0x1 [0211.542] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0211.543] CloseHandle (hObject=0xb4) returned 1 [0211.543] AreFileApisANSI () returned 1 [0211.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c458, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0211.543] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\1033\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0211.544] GetFileType (hFile=0xb4) returned 0x1 [0211.544] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0211.545] CloseHandle (hObject=0xb4) returned 1 [0211.545] AreFileApisANSI () returned 1 [0211.545] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0211.545] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\1033\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0211.549] GetFileType (hFile=0xb4) returned 0x1 [0211.549] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0211.550] CloseHandle (hObject=0xb4) returned 1 [0211.550] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\*", lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0x494d60 [0211.550] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.550] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.550] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.551] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.551] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0 [0211.551] FindClose (in: hFindFile=0x494d60 | out: hFindFile=0x494d60) returned 1 [0211.551] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.551] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.551] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.551] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 0 [0211.551] FindClose (in: hFindFile=0x494aa0 | out: hFindFile=0x494aa0) returned 1 [0211.551] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0211.551] AreFileApisANSI () returned 1 [0211.551] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0211.552] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\smartart graphics\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0211.552] GetFileType (hFile=0xb0) returned 0x1 [0211.552] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0211.553] CloseHandle (hObject=0xb0) returned 1 [0211.553] AreFileApisANSI () returned 1 [0211.553] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0211.553] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\smartart graphics\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0211.587] GetFileType (hFile=0xb0) returned 0x1 [0211.588] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0211.589] CloseHandle (hObject=0xb0) returned 1 [0211.589] AreFileApisANSI () returned 1 [0211.589] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0211.589] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\smartart graphics\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d8e34, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0211.590] GetFileType (hFile=0xb0) returned 0x1 [0211.591] WriteFile (in: hFile=0xb0, lpBuffer=0x3d7ae0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7ad8, lpOverlapped=0x0 | out: lpBuffer=0x3d7ae0*, lpNumberOfBytesWritten=0x3d7ad8*=0x423, lpOverlapped=0x0) returned 1 [0211.592] CloseHandle (hObject=0xb0) returned 1 [0211.592] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\*", lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 0x4948a0 [0211.592] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.593] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.593] AreFileApisANSI () returned 1 [0211.593] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0211.593] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\smartart graphics\\1033\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0211.594] GetFileType (hFile=0xb4) returned 0x1 [0211.594] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0211.595] CloseHandle (hObject=0xb4) returned 1 [0211.595] AreFileApisANSI () returned 1 [0211.595] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0211.596] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\smartart graphics\\1033\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0211.596] GetFileType (hFile=0xb4) returned 0x1 [0211.597] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0211.598] CloseHandle (hObject=0xb4) returned 1 [0211.598] AreFileApisANSI () returned 1 [0211.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0211.598] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\smartart graphics\\1033\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0211.610] GetFileType (hFile=0xb4) returned 0x1 [0211.611] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0211.612] CloseHandle (hObject=0xb4) returned 1 [0211.612] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\*", lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0x494920 [0211.612] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.612] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.613] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.613] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0211.613] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0 [0211.613] FindClose (in: hFindFile=0x494920 | out: hFindFile=0x494920) returned 1 [0211.613] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.613] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.613] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0211.613] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 0 [0211.614] FindClose (in: hFindFile=0x4948a0 | out: hFindFile=0x4948a0) returned 1 [0211.614] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0 [0211.614] FindClose (in: hFindFile=0x494d20 | out: hFindFile=0x494d20) returned 1 [0211.614] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0 [0211.614] FindClose (in: hFindFile=0x494ea0 | out: hFindFile=0x494ea0) returned 1 [0211.615] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0211.615] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0211.615] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0211.615] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0 [0211.615] FindClose (in: hFindFile=0x4948e0 | out: hFindFile=0x4948e0) returned 1 [0211.615] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0211.615] AreFileApisANSI () returned 1 [0211.615] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0211.615] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3db378, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0211.616] GetFileType (hFile=0xa4) returned 0x1 [0211.616] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db428 | out: lpNewFilePointer=0x0) returned 1 [0211.616] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3dc | out: lpNewFilePointer=0x0) returned 1 [0211.616] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db40c | out: lpNewFilePointer=0x0) returned 1 [0211.616] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.616] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.616] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db40c | out: lpNewFilePointer=0x0) returned 1 [0211.617] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.617] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.617] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.635] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.636] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.636] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.636] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.636] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.636] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.636] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.636] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.636] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.636] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.636] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.637] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.637] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.637] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.637] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.637] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.637] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.637] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.637] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.637] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.637] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.637] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.638] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.638] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.638] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.638] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.638] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.638] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.638] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.638] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.638] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.638] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.638] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.638] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.639] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.639] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.639] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.639] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.639] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.639] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.639] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.639] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.639] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.639] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.639] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.639] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.640] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.640] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.640] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.640] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.640] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.640] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.640] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.640] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.640] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.640] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.640] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.640] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.641] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.641] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.641] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.641] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.641] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.641] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.641] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.641] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.641] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.641] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.641] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.641] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.642] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.642] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.642] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.642] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.642] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.642] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.642] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.642] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.642] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.642] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.642] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.642] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.642] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.643] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.643] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.643] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.643] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.643] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.643] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.643] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.643] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.643] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.643] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.643] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.643] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.644] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.644] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.644] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.644] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.644] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.644] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.644] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.644] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.644] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.644] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.644] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.644] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.645] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.645] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.645] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.645] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.645] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.645] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.645] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.645] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.645] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.645] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.645] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.645] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.645] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.646] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.646] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.646] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.646] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.646] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.646] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.646] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.646] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.646] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.646] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.646] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.646] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.647] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.647] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.647] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.647] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.647] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.647] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.647] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.647] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.647] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.647] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.647] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.647] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.647] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.648] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.648] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.648] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.648] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.648] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.648] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.648] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.648] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.648] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.648] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.648] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.648] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.649] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.649] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.649] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.649] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.649] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.649] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.649] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.649] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.650] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.650] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.650] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.650] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.650] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.650] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.650] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.650] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.650] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.650] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.650] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.650] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.651] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.651] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.651] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.651] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.651] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.651] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.651] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.651] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.651] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.651] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.651] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.651] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.651] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.652] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.652] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.652] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.652] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.652] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.652] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.652] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.652] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.652] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.652] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.652] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.652] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.653] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.653] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.653] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.653] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.653] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.653] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.653] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.653] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.653] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.653] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.653] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.653] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.653] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.654] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.654] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.654] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.654] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.654] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.654] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.654] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.654] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.654] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.654] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.654] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.654] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.654] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.655] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.655] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.655] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.655] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.655] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.655] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.655] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.655] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.655] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.655] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.655] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.655] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.655] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.656] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.656] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.656] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.656] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.656] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.656] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.656] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.656] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.656] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.656] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.656] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.656] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.656] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.657] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.657] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.657] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.657] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.657] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.657] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.657] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.657] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.657] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.657] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.657] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.658] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.658] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.658] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.658] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.658] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.658] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.658] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.658] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.658] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.658] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.658] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.658] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.659] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.659] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.659] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.659] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.659] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.659] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.659] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.659] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.659] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.659] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.659] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.659] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.660] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.660] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.660] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3d8 | out: lpNewFilePointer=0x0) returned 1 [0211.660] WriteFile (in: hFile=0xa4, lpBuffer=0x4acd58*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesWritten=0x3db3a4*=0x8, lpOverlapped=0x0) returned 1 [0211.660] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db400 | out: lpNewFilePointer=0x0) returned 1 [0211.660] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db394 | out: lpNewFilePointer=0x0) returned 1 [0211.660] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3db410 | out: lpNewFilePointer=0x0) returned 1 [0211.660] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3c4 | out: lpNewFilePointer=0x0) returned 1 [0211.660] ReadFile (in: hFile=0xa4, lpBuffer=0x4acd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3db3a4, lpOverlapped=0x0 | out: lpBuffer=0x4acd58*, lpNumberOfBytesRead=0x3db3a4*=0x1000, lpOverlapped=0x0) returned 1 [0211.660] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db414 | out: lpNewFilePointer=0x0) returned 1 [0211.660] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3db3a8 | out: lpNewFilePointer=0x0) returned 1 [0211.660] SetFilePointerEx (in: hFile=0xa4, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3db424 | out: lpNewFilePointer=0x0) returned 1 [0211.679] CloseHandle (hObject=0xa4) returned 1 [0211.721] AreFileApisANSI () returned 1 [0211.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0211.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0211.721] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm.cryptoid"), dwFlags=0x2) returned 1 [0211.722] AreFileApisANSI () returned 1 [0211.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0211.889] CloseHandle (hObject=0xa4) returned 1 [0211.890] AreFileApisANSI () returned 1 [0211.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0211.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493e70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0211.890] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx.cryptoid"), dwFlags=0x2) returned 1 [0211.891] AreFileApisANSI () returned 1 [0211.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0212.134] CloseHandle (hObject=0xa4) returned 1 [0212.134] AreFileApisANSI () returned 1 [0212.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0212.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2b60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0212.135] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx.cryptoid"), dwFlags=0x2) returned 1 [0212.136] AreFileApisANSI () returned 1 [0212.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0213.234] CloseHandle (hObject=0xa4) returned 1 [0213.234] AreFileApisANSI () returned 1 [0213.234] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0213.234] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493d80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0213.234] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm.cryptoid"), dwFlags=0x2) returned 1 [0213.235] AreFileApisANSI () returned 1 [0213.235] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0214.504] CloseHandle (hObject=0xa4) returned 1 [0214.504] AreFileApisANSI () returned 1 [0214.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0214.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0214.504] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx.cryptoid"), dwFlags=0x2) returned 1 [0214.505] AreFileApisANSI () returned 1 [0214.505] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0214.507] CloseHandle (hObject=0xa0) returned 1 [0214.508] AreFileApisANSI () returned 1 [0214.508] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0214.519] CloseHandle (hObject=0xa0) returned 1 [0214.520] AreFileApisANSI () returned 1 [0214.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0214.534] CloseHandle (hObject=0xa0) returned 1 [0214.534] AreFileApisANSI () returned 1 [0214.535] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0214.536] CloseHandle (hObject=0xa0) returned 1 [0214.536] AreFileApisANSI () returned 1 [0214.536] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0214.537] CloseHandle (hObject=0xa0) returned 1 [0214.537] AreFileApisANSI () returned 1 [0214.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0214.546] CloseHandle (hObject=0xa0) returned 1 [0214.547] AreFileApisANSI () returned 1 [0214.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0214.548] CloseHandle (hObject=0xa0) returned 1 [0214.548] AreFileApisANSI () returned 1 [0214.548] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0214.564] CloseHandle (hObject=0xa0) returned 1 [0214.564] AreFileApisANSI () returned 1 [0214.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0214.565] CloseHandle (hObject=0xa0) returned 1 [0214.566] AreFileApisANSI () returned 1 [0214.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498528, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0214.567] CloseHandle (hObject=0xa4) returned 1 [0214.567] AreFileApisANSI () returned 1 [0214.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4980a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0214.580] CloseHandle (hObject=0xa4) returned 1 [0214.581] AreFileApisANSI () returned 1 [0214.581] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498128, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0214.582] CloseHandle (hObject=0xa4) returned 1 [0214.582] AreFileApisANSI () returned 1 [0214.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0214.585] CloseHandle (hObject=0xa4) returned 1 [0214.586] AreFileApisANSI () returned 1 [0214.586] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0214.586] CloseHandle (hObject=0xa4) returned 1 [0214.589] AreFileApisANSI () returned 1 [0214.589] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4988a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0214.590] CloseHandle (hObject=0xa4) returned 1 [0214.591] AreFileApisANSI () returned 1 [0214.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0214.630] CloseHandle (hObject=0xa4) returned 1 [0214.633] AreFileApisANSI () returned 1 [0214.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4982a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0214.641] CloseHandle (hObject=0xa4) returned 1 [0214.643] AreFileApisANSI () returned 1 [0214.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ca8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0214.650] CloseHandle (hObject=0xa4) returned 1 [0214.653] AreFileApisANSI () returned 1 [0214.653] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0214.657] CloseHandle (hObject=0xa4) returned 1 [0214.662] AreFileApisANSI () returned 1 [0214.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0214.669] CloseHandle (hObject=0xa4) returned 1 [0214.776] AreFileApisANSI () returned 1 [0214.776] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0214.797] CloseHandle (hObject=0xa4) returned 1 [0214.809] AreFileApisANSI () returned 1 [0214.809] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0214.812] CloseHandle (hObject=0xa4) returned 1 [0214.813] AreFileApisANSI () returned 1 [0214.813] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4982a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0214.814] CloseHandle (hObject=0xa4) returned 1 [0214.814] AreFileApisANSI () returned 1 [0214.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497d28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0214.815] CloseHandle (hObject=0xa4) returned 1 [0214.837] AreFileApisANSI () returned 1 [0214.837] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0214.842] CloseHandle (hObject=0xa8) returned 1 [0214.843] AreFileApisANSI () returned 1 [0214.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0214.844] CloseHandle (hObject=0xa8) returned 1 [0214.844] AreFileApisANSI () returned 1 [0214.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0214.845] CloseHandle (hObject=0xa8) returned 1 [0214.851] AreFileApisANSI () returned 1 [0214.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0214.891] CloseHandle (hObject=0xa8) returned 1 [0214.892] AreFileApisANSI () returned 1 [0214.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0214.893] CloseHandle (hObject=0xa8) returned 1 [0214.893] AreFileApisANSI () returned 1 [0214.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0214.894] CloseHandle (hObject=0xa8) returned 1 [0214.960] AreFileApisANSI () returned 1 [0214.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498228, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0214.964] CloseHandle (hObject=0xa4) returned 1 [0214.965] AreFileApisANSI () returned 1 [0214.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0214.966] CloseHandle (hObject=0xa4) returned 1 [0214.966] AreFileApisANSI () returned 1 [0214.966] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0214.967] CloseHandle (hObject=0xa4) returned 1 [0214.967] AreFileApisANSI () returned 1 [0214.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4984a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0215.202] CloseHandle (hObject=0xa4) returned 1 [0215.207] AreFileApisANSI () returned 1 [0215.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4983a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0215.216] CloseHandle (hObject=0xa4) returned 1 [0215.217] AreFileApisANSI () returned 1 [0215.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498228, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0215.221] CloseHandle (hObject=0xa4) returned 1 [0215.223] AreFileApisANSI () returned 1 [0215.223] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498828, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0215.234] CloseHandle (hObject=0xa8) returned 1 [0215.261] AreFileApisANSI () returned 1 [0215.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4987a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0215.262] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0215.295] GetFileType (hFile=0xa8) returned 0x1 [0215.295] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0215.296] CloseHandle (hObject=0xa8) returned 1 [0215.332] AreFileApisANSI () returned 1 [0215.332] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0215.332] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0215.365] GetFileType (hFile=0xa8) returned 0x1 [0215.365] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0215.366] CloseHandle (hObject=0xa8) returned 1 [0215.383] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0x494ce0 [0215.383] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0215.383] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0215.383] AreFileApisANSI () returned 1 [0215.383] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0215.383] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.416] GetFileType (hFile=0xac) returned 0x1 [0215.416] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.417] CloseHandle (hObject=0xac) returned 1 [0215.423] AreFileApisANSI () returned 1 [0215.423] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f9a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0215.423] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.443] GetFileType (hFile=0xac) returned 0x1 [0215.443] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.444] CloseHandle (hObject=0xac) returned 1 [0215.463] AreFileApisANSI () returned 1 [0215.463] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0215.463] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.465] GetFileType (hFile=0xac) returned 0x1 [0215.465] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.466] CloseHandle (hObject=0xac) returned 1 [0215.466] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\*", lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0x494be0 [0215.466] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.466] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.466] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.466] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.467] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.467] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.467] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.467] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.467] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0 [0215.467] FindClose (in: hFindFile=0x494be0 | out: hFindFile=0x494be0) returned 1 [0215.467] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0215.467] AreFileApisANSI () returned 1 [0215.467] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0215.467] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.474] GetFileType (hFile=0xac) returned 0x1 [0215.475] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.475] CloseHandle (hObject=0xac) returned 1 [0215.476] AreFileApisANSI () returned 1 [0215.476] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0215.476] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.476] GetFileType (hFile=0xac) returned 0x1 [0215.477] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.477] CloseHandle (hObject=0xac) returned 1 [0215.478] AreFileApisANSI () returned 1 [0215.478] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0215.478] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.478] GetFileType (hFile=0xac) returned 0x1 [0215.478] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.479] CloseHandle (hObject=0xac) returned 1 [0215.480] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0x4948a0 [0215.480] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.480] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.480] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.480] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.480] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.480] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.480] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.480] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0 [0215.480] FindClose (in: hFindFile=0x4948a0 | out: hFindFile=0x4948a0) returned 1 [0215.480] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0215.481] AreFileApisANSI () returned 1 [0215.481] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0215.481] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.481] GetFileType (hFile=0xac) returned 0x1 [0215.481] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.482] CloseHandle (hObject=0xac) returned 1 [0215.482] AreFileApisANSI () returned 1 [0215.482] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0215.482] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.488] GetFileType (hFile=0xac) returned 0x1 [0215.489] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.489] CloseHandle (hObject=0xac) returned 1 [0215.490] AreFileApisANSI () returned 1 [0215.490] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0215.490] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.490] GetFileType (hFile=0xac) returned 0x1 [0215.490] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.491] CloseHandle (hObject=0xac) returned 1 [0215.491] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0x4948a0 [0215.492] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.492] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.492] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.492] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.492] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.492] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0 [0215.492] FindClose (in: hFindFile=0x4948a0 | out: hFindFile=0x4948a0) returned 1 [0215.492] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0215.492] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0215.492] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0215.492] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0215.492] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0215.492] AreFileApisANSI () returned 1 [0215.492] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0215.493] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.498] GetFileType (hFile=0xac) returned 0x1 [0215.498] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.499] CloseHandle (hObject=0xac) returned 1 [0215.499] AreFileApisANSI () returned 1 [0215.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0215.499] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.512] GetFileType (hFile=0xac) returned 0x1 [0215.512] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.513] CloseHandle (hObject=0xac) returned 1 [0215.528] AreFileApisANSI () returned 1 [0215.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0215.528] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.544] GetFileType (hFile=0xac) returned 0x1 [0215.544] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.545] CloseHandle (hObject=0xac) returned 1 [0215.558] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0x494c20 [0215.559] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.559] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.559] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.559] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.559] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.559] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0 [0215.559] FindClose (in: hFindFile=0x494c20 | out: hFindFile=0x494c20) returned 1 [0215.562] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0215.562] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0215.562] AreFileApisANSI () returned 1 [0215.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0215.562] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.566] GetFileType (hFile=0xac) returned 0x1 [0215.566] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.567] CloseHandle (hObject=0xac) returned 1 [0215.573] AreFileApisANSI () returned 1 [0215.573] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0215.573] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.586] GetFileType (hFile=0xac) returned 0x1 [0215.587] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.590] CloseHandle (hObject=0xac) returned 1 [0215.597] AreFileApisANSI () returned 1 [0215.597] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0215.597] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.616] GetFileType (hFile=0xac) returned 0x1 [0215.616] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.617] CloseHandle (hObject=0xac) returned 1 [0215.622] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0x4949a0 [0215.622] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.622] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.622] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.622] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.622] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.623] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.623] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0 [0215.623] FindClose (in: hFindFile=0x4949a0 | out: hFindFile=0x4949a0) returned 1 [0215.631] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0215.631] AreFileApisANSI () returned 1 [0215.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0215.631] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.685] GetFileType (hFile=0xac) returned 0x1 [0215.685] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.686] CloseHandle (hObject=0xac) returned 1 [0215.695] AreFileApisANSI () returned 1 [0215.695] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0215.695] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.742] GetFileType (hFile=0xac) returned 0x1 [0215.742] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.743] CloseHandle (hObject=0xac) returned 1 [0215.756] AreFileApisANSI () returned 1 [0215.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0215.756] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.772] GetFileType (hFile=0xac) returned 0x1 [0215.772] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.773] CloseHandle (hObject=0xac) returned 1 [0215.783] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\*", lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0x4949a0 [0215.783] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.783] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.783] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.784] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.784] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.784] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.784] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.784] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.784] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.784] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.784] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.784] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.784] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.784] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0 [0215.784] FindClose (in: hFindFile=0x4949a0 | out: hFindFile=0x4949a0) returned 1 [0215.789] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0215.789] AreFileApisANSI () returned 1 [0215.789] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0215.789] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.793] GetFileType (hFile=0xac) returned 0x1 [0215.793] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.794] CloseHandle (hObject=0xac) returned 1 [0215.818] AreFileApisANSI () returned 1 [0215.818] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0215.818] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.843] GetFileType (hFile=0xac) returned 0x1 [0215.843] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.844] CloseHandle (hObject=0xac) returned 1 [0215.850] AreFileApisANSI () returned 1 [0215.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0215.850] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d9794, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.883] GetFileType (hFile=0xac) returned 0x1 [0215.883] WriteFile (in: hFile=0xac, lpBuffer=0x3d8440*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8438, lpOverlapped=0x0 | out: lpBuffer=0x3d8440*, lpNumberOfBytesWritten=0x3d8438*=0x423, lpOverlapped=0x0) returned 1 [0215.886] CloseHandle (hObject=0xac) returned 1 [0215.894] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\*", lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0x4948a0 [0215.894] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.894] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.895] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.895] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.895] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.895] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.895] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.895] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.895] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 1 [0215.895] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0 [0215.895] FindClose (in: hFindFile=0x4948a0 | out: hFindFile=0x4948a0) returned 1 [0215.911] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0 [0215.911] FindClose (in: hFindFile=0x494ce0 | out: hFindFile=0x494ce0) returned 1 [0215.923] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0 [0215.924] FindClose (in: hFindFile=0x494ee0 | out: hFindFile=0x494ee0) returned 1 [0215.924] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0215.924] AreFileApisANSI () returned 1 [0215.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498b28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0215.924] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\templates\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0215.925] GetFileType (hFile=0xa4) returned 0x1 [0215.925] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0215.927] CloseHandle (hObject=0xa4) returned 1 [0215.927] AreFileApisANSI () returned 1 [0215.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0215.927] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\templates\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0215.928] GetFileType (hFile=0xa4) returned 0x1 [0215.928] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0215.929] CloseHandle (hObject=0xa4) returned 1 [0215.929] AreFileApisANSI () returned 1 [0215.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4987a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0215.930] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\templates\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0215.935] GetFileType (hFile=0xa4) returned 0x1 [0215.935] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0215.936] CloseHandle (hObject=0xa4) returned 1 [0215.937] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x494ca0 [0215.937] FindNextFileA (in: hFindFile=0x494ca0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0215.937] FindNextFileA (in: hFindFile=0x494ca0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0215.937] FindNextFileA (in: hFindFile=0x494ca0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0215.937] FindNextFileA (in: hFindFile=0x494ca0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0215.937] FindNextFileA (in: hFindFile=0x494ca0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0 [0215.937] FindClose (in: hFindFile=0x494ca0 | out: hFindFile=0x494ca0) returned 1 [0215.937] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0215.938] AreFileApisANSI () returned 1 [0215.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4985a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0215.938] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0215.938] GetFileType (hFile=0xa4) returned 0x1 [0215.939] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0215.940] CloseHandle (hObject=0xa4) returned 1 [0215.940] AreFileApisANSI () returned 1 [0215.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498828, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0215.940] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0215.951] GetFileType (hFile=0xa4) returned 0x1 [0215.951] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0215.952] CloseHandle (hObject=0xa4) returned 1 [0215.953] AreFileApisANSI () returned 1 [0215.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0215.953] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3daa54, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4 [0215.953] GetFileType (hFile=0xa4) returned 0x1 [0215.953] WriteFile (in: hFile=0xa4, lpBuffer=0x3d9700*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d96f8, lpOverlapped=0x0 | out: lpBuffer=0x3d9700*, lpNumberOfBytesWritten=0x3d96f8*=0x423, lpOverlapped=0x0) returned 1 [0215.954] CloseHandle (hObject=0xa4) returned 1 [0215.955] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0x494e20 [0215.955] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0215.955] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0215.955] AreFileApisANSI () returned 1 [0215.955] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4984a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0215.955] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0215.956] GetFileType (hFile=0xa8) returned 0x1 [0215.956] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0215.957] CloseHandle (hObject=0xa8) returned 1 [0215.957] AreFileApisANSI () returned 1 [0215.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0215.957] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0215.962] GetFileType (hFile=0xa8) returned 0x1 [0215.968] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0215.969] CloseHandle (hObject=0xa8) returned 1 [0215.969] AreFileApisANSI () returned 1 [0215.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0215.970] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0f4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0215.970] GetFileType (hFile=0xa8) returned 0x1 [0215.970] WriteFile (in: hFile=0xa8, lpBuffer=0x3d8da0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d8d98, lpOverlapped=0x0 | out: lpBuffer=0x3d8da0*, lpNumberOfBytesWritten=0x3d8d98*=0x423, lpOverlapped=0x0) returned 1 [0215.971] CloseHandle (hObject=0xa8) returned 1 [0215.972] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\*", lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0x4949a0 [0215.972] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0215.972] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0215.972] AreFileApisANSI () returned 1 [0215.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0215.972] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\cachedimage_1440_900_pos4.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0b8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0215.973] GetFileType (hFile=0xac) returned 0x1 [0215.973] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da168 | out: lpNewFilePointer=0x0) returned 1 [0215.973] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da11c | out: lpNewFilePointer=0x0) returned 1 [0215.973] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da14c | out: lpNewFilePointer=0x0) returned 1 [0215.973] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.973] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.973] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da14c | out: lpNewFilePointer=0x0) returned 1 [0215.973] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.973] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.973] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.974] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.974] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.974] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.974] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.974] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.974] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.974] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.974] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.974] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.974] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.975] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.975] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.975] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.975] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.975] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.975] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.975] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.975] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.975] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.975] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.976] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.976] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.976] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.976] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.976] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.976] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.976] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.976] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.976] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.976] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.977] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.977] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.977] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.977] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.977] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.977] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.977] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.977] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.978] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.978] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.979] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.979] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.979] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.979] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.979] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.979] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.979] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.979] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.979] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.979] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.980] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.980] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.980] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.980] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.980] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.980] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.980] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.980] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.980] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.980] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.981] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.981] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.981] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.981] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.981] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.981] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.981] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.981] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.981] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.981] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.982] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.982] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.982] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.982] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.982] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.982] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.982] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.982] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.982] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.982] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.983] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.983] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.983] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.983] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.983] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.983] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.983] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.983] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.983] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.983] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.984] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.984] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.984] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.984] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.984] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.984] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.984] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.984] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.984] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.984] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.984] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.985] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.985] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.985] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.985] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.985] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.985] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.985] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.985] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.985] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.985] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.986] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.986] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.986] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.987] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.987] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.987] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.987] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.987] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.987] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.987] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.987] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.987] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.987] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.988] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.988] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.988] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.988] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.988] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.988] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.988] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.988] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.988] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.988] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.988] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.989] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.989] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.989] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.989] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.989] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.989] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.989] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.989] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.989] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.989] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.990] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.990] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.990] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.990] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.990] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.990] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.990] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.990] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.990] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.991] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.991] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.991] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.991] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.991] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.991] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.991] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.991] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.992] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.992] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.992] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0215.992] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0215.992] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0215.992] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0215.992] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0215.992] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0215.992] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0215.993] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0215.993] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0215.993] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0215.993] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0216.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0216.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0216.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0216.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0216.029] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0216.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0216.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0216.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0216.029] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0216.029] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0216.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0216.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0216.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0216.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0216.030] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0216.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0216.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0216.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0216.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0216.030] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0216.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0216.030] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0216.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0216.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0216.031] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0216.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0216.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0216.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0216.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0216.031] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0216.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0216.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0216.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0216.031] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0216.032] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0216.032] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0216.032] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0216.032] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0216.032] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0216.032] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0216.032] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0216.032] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0216.032] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0216.032] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0216.032] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0216.032] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0216.032] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0216.033] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0216.033] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0216.033] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0216.033] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0216.033] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0216.033] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0216.033] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0216.033] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0216.033] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0216.033] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0216.033] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0216.033] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0216.034] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0216.034] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0216.034] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0216.034] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0216.034] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0216.034] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0216.034] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0216.034] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0216.034] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0216.034] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0216.034] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0216.034] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0216.035] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0216.035] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0216.035] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0216.035] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0216.035] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0216.035] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0216.035] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0216.035] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0216.035] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0216.035] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0216.035] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0216.035] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0216.035] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0216.036] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0216.036] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0216.036] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0216.036] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0216.036] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0216.036] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0216.036] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0216.036] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0216.036] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0216.036] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0216.036] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0216.036] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0216.036] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0216.037] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0216.037] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0216.037] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0216.037] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0216.037] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0216.037] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0216.037] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0216.037] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0216.037] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0216.037] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0216.037] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0216.037] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0216.037] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0216.038] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0216.038] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0216.038] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0216.038] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0216.038] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0216.038] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0216.038] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0216.038] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0216.125] CloseHandle (hObject=0xac) returned 1 [0216.127] AreFileApisANSI () returned 1 [0216.127] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0216.127] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2b60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0216.127] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\cachedimage_1440_900_pos4.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\cachedimage_1440_900_pos4.jpg.cryptoid"), dwFlags=0x2) returned 1 [0216.128] AreFileApisANSI () returned 1 [0216.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0216.129] CloseHandle (hObject=0xa0) returned 1 [0216.130] AreFileApisANSI () returned 1 [0216.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0216.131] CloseHandle (hObject=0xa0) returned 1 [0216.131] AreFileApisANSI () returned 1 [0216.131] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0216.137] CloseHandle (hObject=0xa0) returned 1 [0216.138] AreFileApisANSI () returned 1 [0216.138] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0216.139] CloseHandle (hObject=0xa4) returned 1 [0216.140] AreFileApisANSI () returned 1 [0216.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0216.141] CloseHandle (hObject=0xa4) returned 1 [0216.142] AreFileApisANSI () returned 1 [0216.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0216.148] CloseHandle (hObject=0xa4) returned 1 [0216.149] AreFileApisANSI () returned 1 [0216.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d040, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0216.159] CloseHandle (hObject=0x9c) returned 1 [0216.160] AreFileApisANSI () returned 1 [0216.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d300, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0216.165] CloseHandle (hObject=0x9c) returned 1 [0216.167] AreFileApisANSI () returned 1 [0216.168] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cdd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0216.169] CloseHandle (hObject=0x9c) returned 1 [0216.169] AreFileApisANSI () returned 1 [0216.169] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0216.170] CloseHandle (hObject=0xa0) returned 1 [0216.171] AreFileApisANSI () returned 1 [0216.171] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0216.172] CloseHandle (hObject=0xa0) returned 1 [0216.173] AreFileApisANSI () returned 1 [0216.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0216.177] CloseHandle (hObject=0xa0) returned 1 [0216.178] AreFileApisANSI () returned 1 [0216.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0216.179] CloseHandle (hObject=0xa0) returned 1 [0216.180] AreFileApisANSI () returned 1 [0216.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0216.183] CloseHandle (hObject=0xa0) returned 1 [0216.183] AreFileApisANSI () returned 1 [0216.183] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0216.184] CloseHandle (hObject=0xa0) returned 1 [0216.185] AreFileApisANSI () returned 1 [0216.185] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4989a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0216.194] CloseHandle (hObject=0xa4) returned 1 [0216.195] AreFileApisANSI () returned 1 [0216.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4982a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0216.196] CloseHandle (hObject=0xa4) returned 1 [0216.204] AreFileApisANSI () returned 1 [0216.204] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4981a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0216.205] CloseHandle (hObject=0xa4) returned 1 [0216.206] AreFileApisANSI () returned 1 [0216.206] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0216.207] CloseHandle (hObject=0xa8) returned 1 [0216.208] AreFileApisANSI () returned 1 [0216.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0216.209] CloseHandle (hObject=0xa8) returned 1 [0216.209] AreFileApisANSI () returned 1 [0216.209] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4982a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0216.311] CloseHandle (hObject=0xa8) returned 1 [0216.311] AreFileApisANSI () returned 1 [0216.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4980a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0216.312] CloseHandle (hObject=0xa4) returned 1 [0216.313] AreFileApisANSI () returned 1 [0216.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498528, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0216.320] CloseHandle (hObject=0xa4) returned 1 [0216.321] AreFileApisANSI () returned 1 [0216.321] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497d28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0216.322] CloseHandle (hObject=0xa4) returned 1 [0216.323] AreFileApisANSI () returned 1 [0216.323] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0216.326] CloseHandle (hObject=0xa8) returned 1 [0216.327] AreFileApisANSI () returned 1 [0216.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0216.328] CloseHandle (hObject=0xa8) returned 1 [0216.329] AreFileApisANSI () returned 1 [0216.329] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0216.330] CloseHandle (hObject=0xa8) returned 1 [0216.341] AreFileApisANSI () returned 1 [0216.341] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0216.342] CloseHandle (hObject=0xac) returned 1 [0216.342] AreFileApisANSI () returned 1 [0216.342] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0216.342] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493e70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0216.342] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\alternateservices.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\alternateservices.txt.cryptoid"), dwFlags=0x2) returned 1 [0216.343] AreFileApisANSI () returned 1 [0216.343] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0216.345] CloseHandle (hObject=0xac) returned 1 [0216.345] AreFileApisANSI () returned 1 [0216.345] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c508, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0216.349] CloseHandle (hObject=0xac) returned 1 [0216.350] AreFileApisANSI () returned 1 [0216.350] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0216.351] CloseHandle (hObject=0xac) returned 1 [0216.351] AreFileApisANSI () returned 1 [0216.351] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0216.469] CloseHandle (hObject=0xac) returned 1 [0216.470] AreFileApisANSI () returned 1 [0216.470] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0216.470] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493ab0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0216.470] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cert8.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cert8.db.cryptoid"), dwFlags=0x2) returned 1 [0216.471] AreFileApisANSI () returned 1 [0216.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0216.474] CloseHandle (hObject=0xac) returned 1 [0216.475] AreFileApisANSI () returned 1 [0216.475] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0216.484] CloseHandle (hObject=0xac) returned 1 [0216.484] AreFileApisANSI () returned 1 [0216.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f4e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0216.485] CloseHandle (hObject=0xac) returned 1 [0216.486] AreFileApisANSI () returned 1 [0216.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0216.487] CloseHandle (hObject=0xb0) returned 1 [0216.487] AreFileApisANSI () returned 1 [0216.487] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0216.488] CloseHandle (hObject=0xb0) returned 1 [0216.489] AreFileApisANSI () returned 1 [0216.489] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0216.492] CloseHandle (hObject=0xb0) returned 1 [0216.493] AreFileApisANSI () returned 1 [0216.493] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0216.498] GetFileType (hFile=0xac) returned 0x1 [0216.499] CloseHandle (hObject=0xac) returned 1 [0216.500] AreFileApisANSI () returned 1 [0216.500] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0216.501] CloseHandle (hObject=0xac) returned 1 [0216.501] AreFileApisANSI () returned 1 [0216.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0216.502] CloseHandle (hObject=0xac) returned 1 [0216.503] AreFileApisANSI () returned 1 [0216.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0216.504] CloseHandle (hObject=0xb0) returned 1 [0216.504] AreFileApisANSI () returned 1 [0216.504] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0216.505] CloseHandle (hObject=0xb0) returned 1 [0216.506] AreFileApisANSI () returned 1 [0216.506] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c038, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0216.509] CloseHandle (hObject=0xb0) returned 1 [0216.510] AreFileApisANSI () returned 1 [0216.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5a90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0216.515] CloseHandle (hObject=0xb4) returned 1 [0216.515] AreFileApisANSI () returned 1 [0216.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a59c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 130 [0216.516] CloseHandle (hObject=0xb4) returned 1 [0216.517] AreFileApisANSI () returned 1 [0216.517] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 133 [0216.518] CloseHandle (hObject=0xb4) returned 1 [0216.518] AreFileApisANSI () returned 1 [0216.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0216.519] GetFileType (hFile=0xac) returned 0x1 [0216.520] CloseHandle (hObject=0xac) returned 1 [0216.520] AreFileApisANSI () returned 1 [0216.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fe68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0216.521] CloseHandle (hObject=0xac) returned 1 [0216.521] AreFileApisANSI () returned 1 [0216.521] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0216.526] CloseHandle (hObject=0xac) returned 1 [0216.527] AreFileApisANSI () returned 1 [0216.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0216.530] CloseHandle (hObject=0xb0) returned 1 [0216.531] AreFileApisANSI () returned 1 [0216.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0216.532] CloseHandle (hObject=0xb0) returned 1 [0216.532] AreFileApisANSI () returned 1 [0216.532] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c7c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0216.535] CloseHandle (hObject=0xb0) returned 1 [0216.536] AreFileApisANSI () returned 1 [0216.536] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0216.538] GetFileType (hFile=0xac) returned 0x1 [0216.539] CloseHandle (hObject=0xac) returned 1 [0216.540] AreFileApisANSI () returned 1 [0216.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c2f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0216.544] CloseHandle (hObject=0xac) returned 1 [0216.545] AreFileApisANSI () returned 1 [0216.545] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0216.546] CloseHandle (hObject=0xac) returned 1 [0216.547] AreFileApisANSI () returned 1 [0216.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0216.563] CloseHandle (hObject=0xb0) returned 1 [0216.564] AreFileApisANSI () returned 1 [0216.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0216.565] CloseHandle (hObject=0xb0) returned 1 [0216.565] AreFileApisANSI () returned 1 [0216.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bed8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 122 [0216.566] CloseHandle (hObject=0xb0) returned 1 [0216.567] AreFileApisANSI () returned 1 [0216.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0216.570] CloseHandle (hObject=0xb4) returned 1 [0216.570] AreFileApisANSI () returned 1 [0216.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0216.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a30b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0216.571] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.cryptoid"), dwFlags=0x2) returned 1 [0216.606] AreFileApisANSI () returned 1 [0216.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0216.607] CloseHandle (hObject=0xac) returned 1 [0216.608] AreFileApisANSI () returned 1 [0216.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0216.610] CloseHandle (hObject=0xac) returned 1 [0216.628] AreFileApisANSI () returned 1 [0216.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0216.629] CloseHandle (hObject=0xac) returned 1 [0216.630] AreFileApisANSI () returned 1 [0216.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0216.634] CloseHandle (hObject=0xb0) returned 1 [0216.634] AreFileApisANSI () returned 1 [0216.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c5b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 125 [0216.798] CloseHandle (hObject=0xb0) returned 1 [0216.798] AreFileApisANSI () returned 1 [0216.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0216.800] CloseHandle (hObject=0xb0) returned 1 [0216.800] AreFileApisANSI () returned 1 [0216.800] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0216.802] CloseHandle (hObject=0xb4) returned 1 [0216.803] AreFileApisANSI () returned 1 [0216.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0216.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0216.803] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\license.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\license.txt.cryptoid"), dwFlags=0x2) returned 1 [0216.804] AreFileApisANSI () returned 1 [0216.804] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0216.891] CloseHandle (hObject=0xb4) returned 1 [0216.892] AreFileApisANSI () returned 1 [0216.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3d96a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0216.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 136 [0216.892] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.cryptoid"), dwFlags=0x2) returned 1 [0216.893] AreFileApisANSI () returned 1 [0216.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0216.911] CloseHandle (hObject=0xac) returned 1 [0216.912] AreFileApisANSI () returned 1 [0216.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0216.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493ba0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0216.912] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\key3.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\key3.db.cryptoid"), dwFlags=0x2) returned 1 [0216.913] AreFileApisANSI () returned 1 [0216.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0216.914] CloseHandle (hObject=0xac) returned 1 [0216.915] AreFileApisANSI () returned 1 [0216.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0216.915] CloseHandle (hObject=0xac) returned 1 [0216.916] AreFileApisANSI () returned 1 [0216.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0217.076] CloseHandle (hObject=0xac) returned 1 [0217.077] AreFileApisANSI () returned 1 [0217.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0217.078] CloseHandle (hObject=0xac) returned 1 [0217.079] AreFileApisANSI () returned 1 [0217.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0217.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493ee8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0217.079] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\pluginreg.dat"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\pluginreg.dat.cryptoid"), dwFlags=0x2) returned 1 [0217.205] AreFileApisANSI () returned 1 [0217.205] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0217.223] CloseHandle (hObject=0xac) returned 1 [0217.224] AreFileApisANSI () returned 1 [0217.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0217.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4938d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0217.224] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\prefs.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\prefs.js.cryptoid"), dwFlags=0x2) returned 1 [0217.226] AreFileApisANSI () returned 1 [0217.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0217.284] CloseHandle (hObject=0xac) returned 1 [0217.286] AreFileApisANSI () returned 1 [0217.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0217.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493d08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0217.286] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\revocations.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\revocations.txt.cryptoid"), dwFlags=0x2) returned 1 [0217.288] AreFileApisANSI () returned 1 [0217.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0217.290] CloseHandle (hObject=0xac) returned 1 [0217.291] AreFileApisANSI () returned 1 [0217.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0217.292] CloseHandle (hObject=0xac) returned 1 [0217.293] AreFileApisANSI () returned 1 [0217.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bd78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0217.294] CloseHandle (hObject=0xac) returned 1 [0217.295] AreFileApisANSI () returned 1 [0217.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0217.295] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\secmod.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3da0b8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac [0217.296] GetFileType (hFile=0xac) returned 0x1 [0217.296] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da168 | out: lpNewFilePointer=0x0) returned 1 [0217.296] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da11c | out: lpNewFilePointer=0x0) returned 1 [0217.296] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da14c | out: lpNewFilePointer=0x0) returned 1 [0217.297] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.297] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.297] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da14c | out: lpNewFilePointer=0x0) returned 1 [0217.297] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.297] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.297] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.299] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.299] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.299] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.299] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.299] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.300] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.300] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.300] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.300] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.300] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.300] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.300] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.300] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.300] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.300] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.300] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.301] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.301] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.520] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.521] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.521] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.521] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.521] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.521] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.521] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.521] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.521] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.521] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.521] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.522] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.522] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.522] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.522] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.522] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.522] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.522] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.522] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.522] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.522] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.523] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.523] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.523] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.523] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.523] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.523] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.523] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.523] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.523] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.523] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.524] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.524] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.524] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.524] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.524] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.524] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.524] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.524] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.524] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.524] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.525] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.525] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.525] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.525] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.525] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.525] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.525] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.525] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.525] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.525] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.526] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.526] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.526] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.526] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.526] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.526] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.526] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.526] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.526] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.526] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.526] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.527] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.527] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.527] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.527] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.527] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.527] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.527] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.527] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.527] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.527] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.528] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.528] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.528] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.528] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.528] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.528] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.528] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.528] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.528] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.528] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.528] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.531] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.531] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.531] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.531] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.531] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.531] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.531] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.532] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.532] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.532] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.532] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.532] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.532] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.532] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.532] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.532] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.532] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.533] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.533] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.533] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.533] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.533] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.533] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.533] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.533] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.533] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.533] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.533] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.534] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.534] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.534] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.534] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.534] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.534] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.534] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.534] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.534] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.534] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.534] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.535] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.535] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.535] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.535] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.535] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.535] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.535] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.535] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.535] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.535] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.535] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.536] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.536] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.536] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.536] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.536] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.536] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.536] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.536] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.536] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.536] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.536] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.537] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.537] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.537] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.537] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.537] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.537] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.537] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.537] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.537] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.537] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.537] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.538] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.538] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.538] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.538] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.538] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.538] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.538] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.538] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.538] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.538] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.538] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.539] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.539] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.539] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.539] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.539] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.539] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.539] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.539] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.539] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.539] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.540] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.540] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.540] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.540] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.540] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.540] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.540] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.540] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.540] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.540] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.540] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.540] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.541] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.541] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.541] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.541] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.541] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.541] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.541] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.541] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.541] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.541] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.541] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.542] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.542] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.542] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.542] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.542] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.542] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.542] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.542] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.542] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.542] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.543] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.543] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.543] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.543] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.543] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.543] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.543] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.543] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.543] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.543] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.543] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.544] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.544] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.544] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.544] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.544] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.544] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.544] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.544] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.544] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.545] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.545] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.545] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.545] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.545] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.545] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.545] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.545] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.545] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.545] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.545] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.546] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.546] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.546] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.546] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.546] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.546] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.546] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.546] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.546] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.546] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.546] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.547] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.547] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.547] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.547] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.547] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.547] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.547] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.547] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.547] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.547] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.547] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.548] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.548] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.548] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.548] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.548] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.548] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.548] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.548] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.548] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.548] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.548] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.549] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da118 | out: lpNewFilePointer=0x0) returned 1 [0217.549] WriteFile (in: hFile=0xac, lpBuffer=0x4b4d98*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesWritten=0x3da0e4*=0x8, lpOverlapped=0x0) returned 1 [0217.549] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da140 | out: lpNewFilePointer=0x0) returned 1 [0217.549] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0d4 | out: lpNewFilePointer=0x0) returned 1 [0217.549] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3da150 | out: lpNewFilePointer=0x0) returned 1 [0217.549] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da104 | out: lpNewFilePointer=0x0) returned 1 [0217.549] ReadFile (in: hFile=0xac, lpBuffer=0x4b4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3da0e4, lpOverlapped=0x0 | out: lpBuffer=0x4b4d98*, lpNumberOfBytesRead=0x3da0e4*=0x1000, lpOverlapped=0x0) returned 1 [0217.549] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da154 | out: lpNewFilePointer=0x0) returned 1 [0217.549] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3da0e8 | out: lpNewFilePointer=0x0) returned 1 [0217.549] SetFilePointerEx (in: hFile=0xac, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3da164 | out: lpNewFilePointer=0x0) returned 1 [0217.574] CloseHandle (hObject=0xac) returned 1 [0217.581] AreFileApisANSI () returned 1 [0217.581] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0217.581] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493ab0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0217.581] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\secmod.db"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\secmod.db.cryptoid"), dwFlags=0x2) returned 1 [0217.582] AreFileApisANSI () returned 1 [0217.582] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0217.582] CloseHandle (hObject=0xac) returned 1 [0217.583] AreFileApisANSI () returned 1 [0217.583] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0217.583] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2ad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0217.583] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\securitypreloadstate.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\securitypreloadstate.txt.cryptoid"), dwFlags=0x2) returned 1 [0217.584] AreFileApisANSI () returned 1 [0217.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0217.587] CloseHandle (hObject=0xac) returned 1 [0217.588] AreFileApisANSI () returned 1 [0217.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49bf88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0217.589] CloseHandle (hObject=0xac) returned 1 [0217.589] AreFileApisANSI () returned 1 [0217.589] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0217.590] CloseHandle (hObject=0xac) returned 1 [0217.591] AreFileApisANSI () returned 1 [0217.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0217.851] CloseHandle (hObject=0xb0) returned 1 [0217.852] AreFileApisANSI () returned 1 [0217.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 114 [0217.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2be8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 123 [0217.852] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\previous.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.cryptoid"), dwFlags=0x2) returned 1 [0217.853] AreFileApisANSI () returned 1 [0217.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0217.859] CloseHandle (hObject=0xac) returned 1 [0217.860] AreFileApisANSI () returned 1 [0217.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0217.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493e70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0217.860] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore.js"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore.js.cryptoid"), dwFlags=0x2) returned 1 [0217.862] AreFileApisANSI () returned 1 [0217.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0217.880] CloseHandle (hObject=0xac) returned 1 [0217.880] AreFileApisANSI () returned 1 [0217.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0217.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2610, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0217.880] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sitesecurityservicestate.txt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sitesecurityservicestate.txt.cryptoid"), dwFlags=0x2) returned 1 [0217.882] AreFileApisANSI () returned 1 [0217.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0217.883] CloseHandle (hObject=0xac) returned 1 [0217.884] AreFileApisANSI () returned 1 [0217.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0217.885] CloseHandle (hObject=0xac) returned 1 [0217.885] AreFileApisANSI () returned 1 [0217.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0217.888] CloseHandle (hObject=0xac) returned 1 [0217.889] AreFileApisANSI () returned 1 [0217.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0217.890] GetFileType (hFile=0xb0) returned 0x1 [0217.890] CloseHandle (hObject=0xb0) returned 1 [0217.891] AreFileApisANSI () returned 1 [0217.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cbe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0217.893] CloseHandle (hObject=0xb0) returned 1 [0217.894] AreFileApisANSI () returned 1 [0217.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0217.895] CloseHandle (hObject=0xb0) returned 1 [0217.896] AreFileApisANSI () returned 1 [0217.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cb38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0217.898] CloseHandle (hObject=0xb4) returned 1 [0217.898] AreFileApisANSI () returned 1 [0217.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c3a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 124 [0217.901] CloseHandle (hObject=0xb4) returned 1 [0217.901] AreFileApisANSI () returned 1 [0217.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c198, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 127 [0217.903] CloseHandle (hObject=0xb4) returned 1 [0217.903] AreFileApisANSI () returned 1 [0217.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c718, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0217.908] CloseHandle (hObject=0xb8) returned 1 [0217.909] AreFileApisANSI () returned 1 [0217.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c248, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 128 [0217.910] CloseHandle (hObject=0xb8) returned 1 [0217.911] AreFileApisANSI () returned 1 [0217.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c9d8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 131 [0217.912] CloseHandle (hObject=0xb8) returned 1 [0217.912] AreFileApisANSI () returned 1 [0217.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f200, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0217.917] CloseHandle (hObject=0xbc) returned 1 [0217.917] AreFileApisANSI () returned 1 [0217.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49e4e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 152 [0217.919] CloseHandle (hObject=0xbc) returned 1 [0217.919] AreFileApisANSI () returned 1 [0217.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ef60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 155 [0217.920] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7214, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0217.925] GetFileType (hFile=0xbc) returned 0x1 [0217.926] WriteFile (in: hFile=0xbc, lpBuffer=0x3d5ec0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d5eb8, lpOverlapped=0x0 | out: lpBuffer=0x3d5ec0*, lpNumberOfBytesWritten=0x3d5eb8*=0x423, lpOverlapped=0x0) returned 1 [0217.927] CloseHandle (hObject=0xbc) returned 1 [0217.927] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\*", lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 0x494f60 [0217.927] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 1 [0217.927] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 1 [0217.927] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 1 [0217.927] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 1 [0217.927] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 0 [0217.927] FindClose (in: hFindFile=0x494f60 | out: hFindFile=0x494f60) returned 1 [0217.928] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0217.928] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0217.928] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0217.928] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0217.928] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 0 [0217.928] FindClose (in: hFindFile=0x494a60 | out: hFindFile=0x494a60) returned 1 [0217.929] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0 [0217.929] FindClose (in: hFindFile=0x4948a0 | out: hFindFile=0x4948a0) returned 1 [0217.929] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0217.929] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0217.929] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0217.929] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 1 [0217.929] AreFileApisANSI () returned 1 [0217.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0217.929] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0217.934] GetFileType (hFile=0xb4) returned 0x1 [0217.934] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0217.935] CloseHandle (hObject=0xb4) returned 1 [0217.936] AreFileApisANSI () returned 1 [0217.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 137 [0217.936] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0217.937] GetFileType (hFile=0xb4) returned 0x1 [0217.937] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0217.938] CloseHandle (hObject=0xb4) returned 1 [0217.938] AreFileApisANSI () returned 1 [0217.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 140 [0217.938] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d84d4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0217.939] GetFileType (hFile=0xb4) returned 0x1 [0217.939] WriteFile (in: hFile=0xb4, lpBuffer=0x3d7180*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d7178, lpOverlapped=0x0 | out: lpBuffer=0x3d7180*, lpNumberOfBytesWritten=0x3d7178*=0x423, lpOverlapped=0x0) returned 1 [0217.940] CloseHandle (hObject=0xb4) returned 1 [0217.940] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\*", lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0x494aa0 [0217.940] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0217.940] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0217.940] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0217.941] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0217.941] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0217.941] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0217.941] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 1 [0217.941] AreFileApisANSI () returned 1 [0217.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5518, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0217.941] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0217.948] GetFileType (hFile=0xb8) returned 0x1 [0217.948] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0217.949] CloseHandle (hObject=0xb8) returned 1 [0217.949] AreFileApisANSI () returned 1 [0217.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5770, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 141 [0217.949] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0217.950] GetFileType (hFile=0xb8) returned 0x1 [0217.950] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0217.951] CloseHandle (hObject=0xb8) returned 1 [0217.951] AreFileApisANSI () returned 1 [0217.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a5b58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 144 [0217.951] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7b74, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0217.952] GetFileType (hFile=0xb8) returned 0x1 [0217.952] WriteFile (in: hFile=0xb8, lpBuffer=0x3d6820*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d6818, lpOverlapped=0x0 | out: lpBuffer=0x3d6820*, lpNumberOfBytesWritten=0x3d6818*=0x423, lpOverlapped=0x0) returned 1 [0217.953] CloseHandle (hObject=0xb8) returned 1 [0217.953] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\*", lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 0x494e20 [0217.954] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0217.954] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0217.954] AreFileApisANSI () returned 1 [0217.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3bd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0217.954] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7214, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0217.957] GetFileType (hFile=0xbc) returned 0x1 [0217.958] WriteFile (in: hFile=0xbc, lpBuffer=0x3d5ec0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d5eb8, lpOverlapped=0x0 | out: lpBuffer=0x3d5ec0*, lpNumberOfBytesWritten=0x3d5eb8*=0x423, lpOverlapped=0x0) returned 1 [0217.958] CloseHandle (hObject=0xbc) returned 1 [0217.959] AreFileApisANSI () returned 1 [0217.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a38e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 166 [0217.959] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7214, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0217.962] GetFileType (hFile=0xbc) returned 0x1 [0217.962] WriteFile (in: hFile=0xbc, lpBuffer=0x3d5ec0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d5eb8, lpOverlapped=0x0 | out: lpBuffer=0x3d5ec0*, lpNumberOfBytesWritten=0x3d5eb8*=0x423, lpOverlapped=0x0) returned 1 [0217.963] CloseHandle (hObject=0xbc) returned 1 [0217.964] AreFileApisANSI () returned 1 [0217.964] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3bd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 169 [0217.964] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d7214, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0217.965] GetFileType (hFile=0xbc) returned 0x1 [0217.965] WriteFile (in: hFile=0xbc, lpBuffer=0x3d5ec0*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d5eb8, lpOverlapped=0x0 | out: lpBuffer=0x3d5ec0*, lpNumberOfBytesWritten=0x3d5eb8*=0x423, lpOverlapped=0x0) returned 1 [0217.966] CloseHandle (hObject=0xbc) returned 1 [0217.967] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\*", lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 0x494920 [0217.967] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 1 [0217.967] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 1 [0217.967] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 1 [0217.967] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 1 [0217.967] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 1 [0217.967] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 1 [0217.967] AreFileApisANSI () returned 1 [0217.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3600, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 178 [0217.968] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d68b4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0217.968] GetFileType (hFile=0xc0) returned 0x1 [0217.968] WriteFile (in: hFile=0xc0, lpBuffer=0x3d5560*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d5558, lpOverlapped=0x0 | out: lpBuffer=0x3d5560*, lpNumberOfBytesWritten=0x3d5558*=0x423, lpOverlapped=0x0) returned 1 [0217.969] CloseHandle (hObject=0xc0) returned 1 [0217.970] AreFileApisANSI () returned 1 [0217.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3dc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 175 [0217.970] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d68b4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0217.971] GetFileType (hFile=0xc0) returned 0x1 [0217.971] WriteFile (in: hFile=0xc0, lpBuffer=0x3d5560*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d5558, lpOverlapped=0x0 | out: lpBuffer=0x3d5560*, lpNumberOfBytesWritten=0x3d5558*=0x423, lpOverlapped=0x0) returned 1 [0217.972] CloseHandle (hObject=0xc0) returned 1 [0217.972] AreFileApisANSI () returned 1 [0217.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3ad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 178 [0217.972] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3d68b4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0217.977] GetFileType (hFile=0xc0) returned 0x1 [0217.977] WriteFile (in: hFile=0xc0, lpBuffer=0x3d5560*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3d5558, lpOverlapped=0x0 | out: lpBuffer=0x3d5560*, lpNumberOfBytesWritten=0x3d5558*=0x423, lpOverlapped=0x0) returned 1 [0217.978] CloseHandle (hObject=0xc0) returned 1 [0217.978] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\*", lpFindFileData=0x3d6be0 | out: lpFindFileData=0x3d6be0) returned 0x494da0 [0217.978] FindNextFileA (in: hFindFile=0x494da0, lpFindFileData=0x3d6be0 | out: lpFindFileData=0x3d6be0) returned 1 [0217.978] FindNextFileA (in: hFindFile=0x494da0, lpFindFileData=0x3d6be0 | out: lpFindFileData=0x3d6be0) returned 1 [0217.978] FindNextFileA (in: hFindFile=0x494da0, lpFindFileData=0x3d6be0 | out: lpFindFileData=0x3d6be0) returned 1 [0217.978] FindNextFileA (in: hFindFile=0x494da0, lpFindFileData=0x3d6be0 | out: lpFindFileData=0x3d6be0) returned 1 [0217.978] FindNextFileA (in: hFindFile=0x494da0, lpFindFileData=0x3d6be0 | out: lpFindFileData=0x3d6be0) returned 0 [0217.978] FindClose (in: hFindFile=0x494da0 | out: hFindFile=0x494da0) returned 1 [0217.979] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3d7540 | out: lpFindFileData=0x3d7540) returned 0 [0217.979] FindClose (in: hFindFile=0x494920 | out: hFindFile=0x494920) returned 1 [0217.979] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0217.979] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0217.979] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0217.979] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 1 [0217.979] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3d7ea0 | out: lpFindFileData=0x3d7ea0) returned 0 [0217.979] FindClose (in: hFindFile=0x494e20 | out: hFindFile=0x494e20) returned 1 [0217.979] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3d8800 | out: lpFindFileData=0x3d8800) returned 0 [0217.979] FindClose (in: hFindFile=0x494aa0 | out: hFindFile=0x494aa0) returned 1 [0217.979] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3d9160 | out: lpFindFileData=0x3d9160) returned 0 [0217.979] FindClose (in: hFindFile=0x494d60 | out: hFindFile=0x494d60) returned 1 [0217.979] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3d9ac0 | out: lpFindFileData=0x3d9ac0) returned 0 [0217.979] FindClose (in: hFindFile=0x494ea0 | out: hFindFile=0x494ea0) returned 1 [0217.979] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0217.980] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0217.980] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0217.980] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 1 [0217.980] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3da420 | out: lpFindFileData=0x3da420) returned 0 [0217.980] FindClose (in: hFindFile=0x494c60 | out: hFindFile=0x494c60) returned 1 [0217.980] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0217.980] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0217.980] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 1 [0217.980] FindNextFileA (in: hFindFile=0x494ee0, lpFindFileData=0x3dad80 | out: lpFindFileData=0x3dad80) returned 0 [0217.980] FindClose (in: hFindFile=0x494ee0 | out: hFindFile=0x494ee0) returned 1 [0217.980] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 1 [0217.980] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3db6e0 | out: lpFindFileData=0x3db6e0) returned 0 [0217.980] FindClose (in: hFindFile=0x494be0 | out: hFindFile=0x494be0) returned 1 [0217.980] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0217.980] FindClose (in: hFindFile=0x494ba0 | out: hFindFile=0x494ba0) returned 1 [0217.980] FindNextFileA (in: hFindFile=0x494fe0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0217.981] AreFileApisANSI () returned 1 [0217.981] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0217.981] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\mWzt q.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mwzt q.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc638, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c [0217.983] GetFileType (hFile=0x9c) returned 0x1 [0217.984] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e8 | out: lpNewFilePointer=0x0) returned 1 [0217.984] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc69c | out: lpNewFilePointer=0x0) returned 1 [0217.984] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6cc | out: lpNewFilePointer=0x0) returned 1 [0217.984] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0217.984] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0217.984] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6cc | out: lpNewFilePointer=0x0) returned 1 [0217.984] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0217.984] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0217.984] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0217.986] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0217.987] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0217.987] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0217.987] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0217.987] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0217.987] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0217.987] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0217.987] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0217.987] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0217.987] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0217.988] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0217.988] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0217.988] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0217.988] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0217.988] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0217.988] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0217.988] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0217.988] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0217.988] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0217.989] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0217.989] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0217.989] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0217.989] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0217.989] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0217.989] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0217.989] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0217.989] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0217.989] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0217.989] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0217.990] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0217.990] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0217.990] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0217.990] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0217.990] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0217.990] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0217.990] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0217.990] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0217.990] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0217.990] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0217.990] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0217.991] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0217.991] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0217.991] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0217.991] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0217.991] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0217.991] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0217.991] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0217.991] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0217.991] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0217.991] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0217.992] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0217.992] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0217.992] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0217.992] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0217.992] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0217.992] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0217.992] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0217.992] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0217.992] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0217.992] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0217.993] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0217.993] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0217.993] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0217.993] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0217.993] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0217.993] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0217.993] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0217.993] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0217.993] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0217.993] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0217.994] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0217.994] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0217.994] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0217.994] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0217.994] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0217.994] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0217.994] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0217.994] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0217.994] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0217.994] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0217.994] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0217.995] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0217.995] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0217.995] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0217.995] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0217.995] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0217.995] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0217.995] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0217.995] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0217.995] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0217.995] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0217.996] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0217.996] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0217.996] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0217.996] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0217.996] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0217.996] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0217.996] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0217.996] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0217.996] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0217.996] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0217.996] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0217.997] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0217.997] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0217.997] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0217.997] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0217.997] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0217.997] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0217.997] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0217.998] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0217.998] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0217.998] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0217.998] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0217.998] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0217.998] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0217.999] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0217.999] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0217.999] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0217.999] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0217.999] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0217.999] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0217.999] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0217.999] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0217.999] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0217.999] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0217.999] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.000] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.000] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.000] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.000] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.000] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.000] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0218.000] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0218.000] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0218.000] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0218.000] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.000] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.001] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.001] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.001] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.001] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.001] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0218.001] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0218.001] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0218.001] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0218.001] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.001] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.001] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.002] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.002] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.002] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.002] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0218.002] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0218.002] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0218.002] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0218.002] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.002] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.002] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.002] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.003] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.003] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.003] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0218.003] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0218.003] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0218.003] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0218.003] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.003] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.003] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.003] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.003] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.003] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.004] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0218.004] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0218.004] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0218.004] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0218.004] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.004] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.004] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.004] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.004] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.004] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.004] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0218.005] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0218.005] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0218.005] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0218.005] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.005] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.005] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.005] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.005] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.005] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.005] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0218.005] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0218.005] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0218.006] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0218.006] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.006] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.006] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.006] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.006] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.006] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.006] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0218.006] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0218.006] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0218.006] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0218.006] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.007] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.007] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.007] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.007] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.007] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.007] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0218.007] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0218.007] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0218.007] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0218.007] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.007] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.008] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.008] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.008] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.008] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.008] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0218.008] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0218.008] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0218.008] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0218.008] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.008] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.008] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.009] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.009] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.009] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.009] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0218.009] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0218.009] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0218.009] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0218.009] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.009] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.009] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.009] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.009] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.010] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.010] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0218.010] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0218.010] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0218.010] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0218.010] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.010] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.010] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.010] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.010] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.010] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.011] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0218.011] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0218.011] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0218.011] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0218.011] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.011] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.011] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.011] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.011] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.011] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.011] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0218.012] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0218.012] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0218.012] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0218.012] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.012] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.012] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.012] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.012] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.012] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.012] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0218.012] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0218.013] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0218.013] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0218.013] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.013] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.023] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.023] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.023] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.023] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.023] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0218.023] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0218.023] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0218.024] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0218.024] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.024] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.024] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.024] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.024] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.024] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.024] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0218.024] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0218.024] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0218.024] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0218.025] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0218.025] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0218.025] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0218.025] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0218.025] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0218.025] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0218.083] CloseHandle (hObject=0x9c) returned 1 [0218.083] AreFileApisANSI () returned 1 [0218.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0218.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495dc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0218.083] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\mWzt q.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mwzt q.mp3"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\mWzt q.mp3.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mwzt q.mp3.cryptoid"), dwFlags=0x2) returned 1 [0218.084] AreFileApisANSI () returned 1 [0218.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0218.132] CloseHandle (hObject=0x9c) returned 1 [0218.132] AreFileApisANSI () returned 1 [0218.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0218.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cdd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0218.132] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPx071owX3fQhH1MEqBe.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\npx071owx3fqhh1meqbe.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPx071owX3fQhH1MEqBe.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\npx071owx3fqhh1meqbe.gif.cryptoid"), dwFlags=0x2) returned 1 [0218.134] AreFileApisANSI () returned 1 [0218.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0218.209] CloseHandle (hObject=0x9c) returned 1 [0218.209] AreFileApisANSI () returned 1 [0218.209] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0218.209] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495e50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0218.209] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ok4__FTa.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ok4__fta.avi"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ok4__FTa.avi.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ok4__fta.avi.cryptoid"), dwFlags=0x2) returned 1 [0218.211] AreFileApisANSI () returned 1 [0218.211] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0218.257] CloseHandle (hObject=0x9c) returned 1 [0218.257] AreFileApisANSI () returned 1 [0218.257] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0218.257] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d1a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0218.257] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\QPQWxmCPIrjXo.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qpqwxmcpirjxo.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\QPQWxmCPIrjXo.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qpqwxmcpirjxo.wav.cryptoid"), dwFlags=0x2) returned 1 [0218.258] AreFileApisANSI () returned 1 [0218.258] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0218.281] CloseHandle (hObject=0x9c) returned 1 [0218.281] AreFileApisANSI () returned 1 [0218.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0218.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495dc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0218.282] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\QYvNdS N.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qyvnds n.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\QYvNdS N.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qyvnds n.png.cryptoid"), dwFlags=0x2) returned 1 [0218.283] AreFileApisANSI () returned 1 [0218.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0218.288] CloseHandle (hObject=0x9c) returned 1 [0218.288] AreFileApisANSI () returned 1 [0218.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0218.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495d30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0218.288] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rs2b_S.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rs2b_s.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rs2b_S.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rs2b_s.gif.cryptoid"), dwFlags=0x2) returned 1 [0218.289] AreFileApisANSI () returned 1 [0218.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d300, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0218.291] CloseHandle (hObject=0x9c) returned 1 [0218.291] AreFileApisANSI () returned 1 [0218.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0218.292] CloseHandle (hObject=0x9c) returned 1 [0218.292] AreFileApisANSI () returned 1 [0218.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cf38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0218.294] CloseHandle (hObject=0x9c) returned 1 [0218.294] AreFileApisANSI () returned 1 [0218.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0218.298] CloseHandle (hObject=0xa0) returned 1 [0218.298] AreFileApisANSI () returned 1 [0218.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0218.300] CloseHandle (hObject=0xa0) returned 1 [0218.300] AreFileApisANSI () returned 1 [0218.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0218.301] CloseHandle (hObject=0xa0) returned 1 [0218.301] AreFileApisANSI () returned 1 [0218.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0218.337] CloseHandle (hObject=0x9c) returned 1 [0218.338] AreFileApisANSI () returned 1 [0218.338] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0218.338] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495988, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0218.338] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sp8eP.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\sp8ep.rtf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sp8eP.rtf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\sp8ep.rtf.cryptoid"), dwFlags=0x2) returned 1 [0218.339] AreFileApisANSI () returned 1 [0218.339] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0218.345] CloseHandle (hObject=0x9c) returned 1 [0218.346] AreFileApisANSI () returned 1 [0218.346] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0218.346] CloseHandle (hObject=0x9c) returned 1 [0218.347] AreFileApisANSI () returned 1 [0218.347] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0218.359] CloseHandle (hObject=0x9c) returned 1 [0218.359] AreFileApisANSI () returned 1 [0218.359] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0218.363] CloseHandle (hObject=0xa0) returned 1 [0218.363] AreFileApisANSI () returned 1 [0218.363] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0218.364] CloseHandle (hObject=0xa0) returned 1 [0218.364] AreFileApisANSI () returned 1 [0218.364] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0218.379] CloseHandle (hObject=0xa0) returned 1 [0218.379] AreFileApisANSI () returned 1 [0218.379] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0218.380] CloseHandle (hObject=0xa4) returned 1 [0218.380] AreFileApisANSI () returned 1 [0218.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0218.381] CloseHandle (hObject=0xa4) returned 1 [0218.381] AreFileApisANSI () returned 1 [0218.381] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0218.384] CloseHandle (hObject=0xa4) returned 1 [0218.384] AreFileApisANSI () returned 1 [0218.385] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0218.409] CloseHandle (hObject=0x9c) returned 1 [0218.409] AreFileApisANSI () returned 1 [0218.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0218.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ce30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0218.409] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\T1Iknp6Pk8PXQiv0eu0T.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\t1iknp6pk8pxqiv0eu0t.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\T1Iknp6Pk8PXQiv0eu0T.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\t1iknp6pk8pxqiv0eu0t.wav.cryptoid"), dwFlags=0x2) returned 1 [0218.410] AreFileApisANSI () returned 1 [0218.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0218.466] CloseHandle (hObject=0x9c) returned 1 [0218.466] AreFileApisANSI () returned 1 [0218.466] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0218.466] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ccd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0218.466] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WKckXSX NBNM.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\wkckxsx nbnm.pptx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WKckXSX NBNM.pptx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\wkckxsx nbnm.pptx.cryptoid"), dwFlags=0x2) returned 1 [0218.467] AreFileApisANSI () returned 1 [0218.467] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0218.491] CloseHandle (hObject=0x9c) returned 1 [0218.491] AreFileApisANSI () returned 1 [0218.491] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0218.491] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0218.491] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wzLkF3TdnJX-52gUlhF.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\wzlkf3tdnjx-52gulhf.mp3"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wzLkF3TdnJX-52gUlhF.mp3.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\wzlkf3tdnjx-52gulhf.mp3.cryptoid"), dwFlags=0x2) returned 1 [0218.492] AreFileApisANSI () returned 1 [0218.492] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0218.572] CloseHandle (hObject=0x9c) returned 1 [0218.572] AreFileApisANSI () returned 1 [0218.572] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0218.572] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d2a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0218.572] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xq26AmfvZHaSWGihSFRj.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xq26amfvzhaswgihsfrj.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xq26AmfvZHaSWGihSFRj.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xq26amfvzhaswgihsfrj.png.cryptoid"), dwFlags=0x2) returned 1 [0218.575] AreFileApisANSI () returned 1 [0218.575] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0218.678] CloseHandle (hObject=0x9c) returned 1 [0218.678] AreFileApisANSI () returned 1 [0218.678] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0218.678] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d300, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0218.678] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\XV3vAexw5-kMVn2RP.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xv3vaexw5-kmvn2rp.ots"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\XV3vAexw5-kMVn2RP.ots.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xv3vaexw5-kmvn2rp.ots.cryptoid"), dwFlags=0x2) returned 1 [0218.679] AreFileApisANSI () returned 1 [0218.679] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0218.721] CloseHandle (hObject=0x9c) returned 1 [0218.722] AreFileApisANSI () returned 1 [0218.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0218.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cf38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0218.722] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y-KstyX3JBlwqy_Mvb.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\y-kstyx3jblwqy_mvb.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y-KstyX3JBlwqy_Mvb.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\y-kstyx3jblwqy_mvb.wav.cryptoid"), dwFlags=0x2) returned 1 [0218.723] AreFileApisANSI () returned 1 [0218.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0218.724] CloseHandle (hObject=0x94) returned 1 [0218.725] AreFileApisANSI () returned 1 [0218.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0218.726] CloseHandle (hObject=0x94) returned 1 [0218.726] AreFileApisANSI () returned 1 [0218.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0218.728] CloseHandle (hObject=0x94) returned 1 [0218.728] AreFileApisANSI () returned 1 [0218.728] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0218.729] CloseHandle (hObject=0x94) returned 1 [0218.729] AreFileApisANSI () returned 1 [0218.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0218.730] CloseHandle (hObject=0x94) returned 1 [0218.730] AreFileApisANSI () returned 1 [0218.730] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0218.730] CloseHandle (hObject=0x94) returned 1 [0218.731] AreFileApisANSI () returned 1 [0218.731] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495a60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0218.735] CloseHandle (hObject=0x94) returned 1 [0218.735] AreFileApisANSI () returned 1 [0218.735] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495b80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0218.736] CloseHandle (hObject=0x94) returned 1 [0218.736] AreFileApisANSI () returned 1 [0218.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495a18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0218.737] CloseHandle (hObject=0x94) returned 1 [0218.737] AreFileApisANSI () returned 1 [0218.737] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495bc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0218.744] CloseHandle (hObject=0x94) returned 1 [0218.747] AreFileApisANSI () returned 1 [0218.747] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495d30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0218.754] CloseHandle (hObject=0x94) returned 1 [0218.756] AreFileApisANSI () returned 1 [0218.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495988, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0218.759] CloseHandle (hObject=0x94) returned 1 [0218.761] AreFileApisANSI () returned 1 [0218.761] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0218.890] CloseHandle (hObject=0x98) returned 1 [0218.893] AreFileApisANSI () returned 1 [0218.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0218.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495a60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0218.893] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\3DKWncl-i0Y_Bvc.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\3dkwncl-i0y_bvc.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\3DKWncl-i0Y_Bvc.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\3dkwncl-i0y_bvc.wav.cryptoid"), dwFlags=0x2) returned 1 [0218.895] AreFileApisANSI () returned 1 [0218.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0218.948] CloseHandle (hObject=0x98) returned 1 [0218.955] AreFileApisANSI () returned 1 [0218.955] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0218.955] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495e98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0218.955] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\4dAItX0.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\4daitx0.pptx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\4dAItX0.pptx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\4daitx0.pptx.cryptoid"), dwFlags=0x2) returned 1 [0218.959] AreFileApisANSI () returned 1 [0218.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0219.067] CloseHandle (hObject=0x98) returned 1 [0219.071] AreFileApisANSI () returned 1 [0219.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0219.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495988, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0219.071] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\6GeQnFp.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\6geqnfp.flv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\6GeQnFp.flv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\6geqnfp.flv.cryptoid"), dwFlags=0x2) returned 1 [0219.074] AreFileApisANSI () returned 1 [0219.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0219.146] CloseHandle (hObject=0x98) returned 1 [0219.148] AreFileApisANSI () returned 1 [0219.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0219.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495b80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0219.148] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\DxQHLn7SAqpT.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\dxqhln7saqpt.swf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\DxQHLn7SAqpT.swf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\dxqhln7saqpt.swf.cryptoid"), dwFlags=0x2) returned 1 [0219.155] AreFileApisANSI () returned 1 [0219.155] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0219.185] CloseHandle (hObject=0x98) returned 1 [0219.187] AreFileApisANSI () returned 1 [0219.187] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0219.187] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4958b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0219.187] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\EqGzrqdsq.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eqgzrqdsq.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\EqGzrqdsq.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eqgzrqdsq.png.cryptoid"), dwFlags=0x2) returned 1 [0219.191] AreFileApisANSI () returned 1 [0219.191] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 40 [0219.285] CloseHandle (hObject=0x98) returned 1 [0219.293] AreFileApisANSI () returned 1 [0219.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 40 [0219.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495f70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0219.294] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\F0jJ.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\f0jj.mp3"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\F0jJ.mp3.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\f0jj.mp3.cryptoid"), dwFlags=0x2) returned 1 [0219.315] AreFileApisANSI () returned 1 [0219.315] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0219.319] CloseHandle (hObject=0x98) returned 1 [0219.323] AreFileApisANSI () returned 1 [0219.323] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0219.323] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495a18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0219.323] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\F0RvyL0DJzyTXmMqqnT.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\f0rvyl0djzytxmmqqnt.ppt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\F0RvyL0DJzyTXmMqqnT.ppt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\f0rvyl0djzytxmmqqnt.ppt.cryptoid"), dwFlags=0x2) returned 1 [0219.327] AreFileApisANSI () returned 1 [0219.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0219.421] CloseHandle (hObject=0x98) returned 1 [0219.423] AreFileApisANSI () returned 1 [0219.423] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0219.423] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495ee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0219.423] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\Fa08zfgbx.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fa08zfgbx.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\Fa08zfgbx.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fa08zfgbx.wav.cryptoid"), dwFlags=0x2) returned 1 [0219.425] AreFileApisANSI () returned 1 [0219.425] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0219.467] CloseHandle (hObject=0x98) returned 1 [0219.477] AreFileApisANSI () returned 1 [0219.477] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0219.477] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cf38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0219.477] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\ff64OVDvyTk5S ab60v5.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ff64ovdvytk5s ab60v5.xlsx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\ff64OVDvyTk5S ab60v5.xlsx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ff64ovdvytk5s ab60v5.xlsx.cryptoid"), dwFlags=0x2) returned 1 [0219.481] AreFileApisANSI () returned 1 [0219.481] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0219.499] CloseHandle (hObject=0x98) returned 1 [0219.503] AreFileApisANSI () returned 1 [0219.503] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0219.507] CloseHandle (hObject=0x98) returned 1 [0219.512] AreFileApisANSI () returned 1 [0219.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0219.516] CloseHandle (hObject=0x98) returned 1 [0219.518] AreFileApisANSI () returned 1 [0219.518] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0219.533] CloseHandle (hObject=0x9c) returned 1 [0219.535] AreFileApisANSI () returned 1 [0219.535] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0219.539] CloseHandle (hObject=0x9c) returned 1 [0219.544] AreFileApisANSI () returned 1 [0219.544] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0219.551] CloseHandle (hObject=0x9c) returned 1 [0219.554] AreFileApisANSI () returned 1 [0219.554] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0219.630] CloseHandle (hObject=0xa0) returned 1 [0219.648] AreFileApisANSI () returned 1 [0219.648] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0219.648] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d0f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0219.648] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\fWSKqH8jXSrDrYg7\\4d-eTTo6\\eHCe zbou.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fwskqh8jxsrdryg7\\4d-etto6\\ehce zbou.avi"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\fWSKqH8jXSrDrYg7\\4d-eTTo6\\eHCe zbou.avi.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fwskqh8jxsrdryg7\\4d-etto6\\ehce zbou.avi.cryptoid"), dwFlags=0x2) returned 1 [0219.649] AreFileApisANSI () returned 1 [0219.649] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0219.692] CloseHandle (hObject=0xa0) returned 1 [0219.699] AreFileApisANSI () returned 1 [0219.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0219.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0219.699] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\fWSKqH8jXSrDrYg7\\4d-eTTo6\\uQDCKEk0E7PzLjK.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fwskqh8jxsrdryg7\\4d-etto6\\uqdckek0e7pzljk.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\fWSKqH8jXSrDrYg7\\4d-eTTo6\\uQDCKEk0E7PzLjK.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fwskqh8jxsrdryg7\\4d-etto6\\uqdckek0e7pzljk.gif.cryptoid"), dwFlags=0x2) returned 1 [0219.715] AreFileApisANSI () returned 1 [0219.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0219.856] CloseHandle (hObject=0x9c) returned 1 [0219.856] AreFileApisANSI () returned 1 [0219.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0219.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d1a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0219.856] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\fWSKqH8jXSrDrYg7\\s1QlIgYpESyWEm.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fwskqh8jxsrdryg7\\s1qligypesywem.csv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\fWSKqH8jXSrDrYg7\\s1QlIgYpESyWEm.csv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fwskqh8jxsrdryg7\\s1qligypesywem.csv.cryptoid"), dwFlags=0x2) returned 1 [0219.857] AreFileApisANSI () returned 1 [0219.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0219.898] CloseHandle (hObject=0x9c) returned 1 [0219.899] AreFileApisANSI () returned 1 [0219.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0219.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0219.899] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\fWSKqH8jXSrDrYg7\\_KHNg0d_KLK6B80s.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fwskqh8jxsrdryg7\\_khng0d_klk6b80s.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\fWSKqH8jXSrDrYg7\\_KHNg0d_KLK6B80s.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fwskqh8jxsrdryg7\\_khng0d_klk6b80s.gif.cryptoid"), dwFlags=0x2) returned 1 [0219.900] AreFileApisANSI () returned 1 [0219.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d040, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0219.901] CloseHandle (hObject=0x98) returned 1 [0219.901] AreFileApisANSI () returned 1 [0219.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0219.902] CloseHandle (hObject=0x98) returned 1 [0219.902] AreFileApisANSI () returned 1 [0219.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0219.903] CloseHandle (hObject=0x98) returned 1 [0219.903] AreFileApisANSI () returned 1 [0219.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0219.952] CloseHandle (hObject=0x9c) returned 1 [0219.953] AreFileApisANSI () returned 1 [0219.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0219.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495988, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0219.953] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\gIQHK2xH Bk6n\\0To1Y.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\giqhk2xh bk6n\\0to1y.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\gIQHK2xH Bk6n\\0To1Y.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\giqhk2xh bk6n\\0to1y.png.cryptoid"), dwFlags=0x2) returned 1 [0219.954] AreFileApisANSI () returned 1 [0219.954] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0220.050] CloseHandle (hObject=0x9c) returned 1 [0220.051] AreFileApisANSI () returned 1 [0220.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0220.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0220.051] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\gIQHK2xH Bk6n\\2XJS 4MVeYESD.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\giqhk2xh bk6n\\2xjs 4mveyesd.mp3"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\gIQHK2xH Bk6n\\2XJS 4MVeYESD.mp3.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\giqhk2xh bk6n\\2xjs 4mveyesd.mp3.cryptoid"), dwFlags=0x2) returned 1 [0220.052] AreFileApisANSI () returned 1 [0220.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0220.114] CloseHandle (hObject=0x9c) returned 1 [0220.114] AreFileApisANSI () returned 1 [0220.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0220.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ce88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0220.114] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\gIQHK2xH Bk6n\\Kb-TvbKw h_mK1CPAWc.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\giqhk2xh bk6n\\kb-tvbkw h_mk1cpawc.avi"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\gIQHK2xH Bk6n\\Kb-TvbKw h_mK1CPAWc.avi.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\giqhk2xh bk6n\\kb-tvbkw h_mk1cpawc.avi.cryptoid"), dwFlags=0x2) returned 1 [0220.115] AreFileApisANSI () returned 1 [0220.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0220.171] CloseHandle (hObject=0x9c) returned 1 [0220.171] AreFileApisANSI () returned 1 [0220.171] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0220.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d098, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0220.172] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\gIQHK2xH Bk6n\\kvfOmRm G.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\giqhk2xh bk6n\\kvfomrm g.flv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\gIQHK2xH Bk6n\\kvfOmRm G.flv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\giqhk2xh bk6n\\kvfomrm g.flv.cryptoid"), dwFlags=0x2) returned 1 [0220.173] AreFileApisANSI () returned 1 [0220.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0220.741] CloseHandle (hObject=0x9c) returned 1 [0220.741] AreFileApisANSI () returned 1 [0220.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0220.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495f70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0220.741] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\gIQHK2xH Bk6n\\RMow.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\giqhk2xh bk6n\\rmow.swf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\gIQHK2xH Bk6n\\RMow.swf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\giqhk2xh bk6n\\rmow.swf.cryptoid"), dwFlags=0x2) returned 1 [0220.742] AreFileApisANSI () returned 1 [0220.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0220.853] CloseHandle (hObject=0x9c) returned 1 [0220.853] AreFileApisANSI () returned 1 [0220.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0220.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d408, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0220.853] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\gIQHK2xH Bk6n\\zP7A9SQh.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\giqhk2xh bk6n\\zp7a9sqh.swf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\gIQHK2xH Bk6n\\zP7A9SQh.swf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\giqhk2xh bk6n\\zp7a9sqh.swf.cryptoid"), dwFlags=0x2) returned 1 [0220.854] AreFileApisANSI () returned 1 [0220.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0220.917] CloseHandle (hObject=0x98) returned 1 [0220.917] AreFileApisANSI () returned 1 [0220.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0220.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495e50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0220.917] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\hYBLLIR_.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hybllir_.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\hYBLLIR_.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hybllir_.png.cryptoid"), dwFlags=0x2) returned 1 [0220.918] AreFileApisANSI () returned 1 [0220.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 42 [0221.124] CloseHandle (hObject=0x98) returned 1 [0221.125] AreFileApisANSI () returned 1 [0221.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 42 [0221.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4958f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0221.125] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\jqBuob.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\jqbuob.doc"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\jqBuob.doc.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\jqbuob.doc.cryptoid"), dwFlags=0x2) returned 1 [0221.126] AreFileApisANSI () returned 1 [0221.126] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0221.217] CloseHandle (hObject=0x98) returned 1 [0221.219] AreFileApisANSI () returned 1 [0221.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0221.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495ce8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0221.219] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\KcBRkz1j-QSrfXr.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\kcbrkz1j-qsrfxr.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\KcBRkz1j-QSrfXr.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\kcbrkz1j-qsrfxr.jpg.cryptoid"), dwFlags=0x2) returned 1 [0221.220] AreFileApisANSI () returned 1 [0221.220] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0221.308] CloseHandle (hObject=0x98) returned 1 [0221.309] AreFileApisANSI () returned 1 [0221.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0221.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495868, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0221.309] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\KdWpMdP8tS2wDUWP.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\kdwpmdp8ts2wduwp.odt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\KdWpMdP8tS2wDUWP.odt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\kdwpmdp8ts2wduwp.odt.cryptoid"), dwFlags=0x2) returned 1 [0221.311] AreFileApisANSI () returned 1 [0221.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0221.467] CloseHandle (hObject=0x98) returned 1 [0221.467] AreFileApisANSI () returned 1 [0221.467] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0221.467] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d0f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0221.467] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\m4VWuK3W6rqqqbt5N4NG.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\m4vwuk3w6rqqqbt5n4ng.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\m4VWuK3W6rqqqbt5N4NG.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\m4vwuk3w6rqqqbt5n4ng.wav.cryptoid"), dwFlags=0x2) returned 1 [0221.469] AreFileApisANSI () returned 1 [0221.469] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0221.973] CloseHandle (hObject=0x98) returned 1 [0221.982] AreFileApisANSI () returned 1 [0221.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0221.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4958b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0221.982] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\MmjH6Zi4wZZG8.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\mmjh6zi4wzzg8.mp4"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\MmjH6Zi4wZZG8.mp4.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\mmjh6zi4wzzg8.mp4.cryptoid"), dwFlags=0x2) returned 1 [0222.003] AreFileApisANSI () returned 1 [0222.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0222.040] CloseHandle (hObject=0x98) returned 1 [0222.046] AreFileApisANSI () returned 1 [0222.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0222.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d1f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0222.046] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\mpgZee6sKT4pE YqhqZ2.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\mpgzee6skt4pe yqhqz2.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\mpgZee6sKT4pE YqhqZ2.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\mpgzee6skt4pe yqhqz2.jpg.cryptoid"), dwFlags=0x2) returned 1 [0222.082] AreFileApisANSI () returned 1 [0222.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 40 [0222.141] CloseHandle (hObject=0x98) returned 1 [0222.188] AreFileApisANSI () returned 1 [0222.188] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 40 [0222.188] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495c58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0222.188] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\muBA.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\muba.avi"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\muBA.avi.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\muba.avi.cryptoid"), dwFlags=0x2) returned 1 [0222.191] AreFileApisANSI () returned 1 [0222.191] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0222.245] CloseHandle (hObject=0x98) returned 1 [0222.282] AreFileApisANSI () returned 1 [0222.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0222.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495e98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0222.282] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\PnUT-.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\pnut-.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\PnUT-.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\pnut-.png.cryptoid"), dwFlags=0x2) returned 1 [0222.300] AreFileApisANSI () returned 1 [0222.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0222.504] CloseHandle (hObject=0x98) returned 1 [0222.542] AreFileApisANSI () returned 1 [0222.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0222.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4959d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0222.542] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\PVpn C4kkpr.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\pvpn c4kkpr.m4a"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\PVpn C4kkpr.m4a.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\pvpn c4kkpr.m4a.cryptoid"), dwFlags=0x2) returned 1 [0222.562] AreFileApisANSI () returned 1 [0222.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0222.566] CloseHandle (hObject=0x98) returned 1 [0222.611] AreFileApisANSI () returned 1 [0222.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0222.617] CloseHandle (hObject=0x98) returned 1 [0222.619] AreFileApisANSI () returned 1 [0222.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0222.624] CloseHandle (hObject=0x98) returned 1 [0222.645] AreFileApisANSI () returned 1 [0222.645] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0222.708] CloseHandle (hObject=0x9c) returned 1 [0222.710] AreFileApisANSI () returned 1 [0222.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0222.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0222.710] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\qwCFJ0csnUB1gvy2j\\0N139-6fOP.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qwcfj0csnub1gvy2j\\0n139-6fop.pptx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\qwCFJ0csnUB1gvy2j\\0N139-6fOP.pptx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qwcfj0csnub1gvy2j\\0n139-6fop.pptx.cryptoid"), dwFlags=0x2) returned 1 [0222.819] AreFileApisANSI () returned 1 [0222.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0223.007] CloseHandle (hObject=0x9c) returned 1 [0223.007] AreFileApisANSI () returned 1 [0223.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0223.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0223.007] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\qwCFJ0csnUB1gvy2j\\aPKqQEU5nPY.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qwcfj0csnub1gvy2j\\apkqqeu5npy.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\qwCFJ0csnUB1gvy2j\\aPKqQEU5nPY.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qwcfj0csnub1gvy2j\\apkqqeu5npy.png.cryptoid"), dwFlags=0x2) returned 1 [0223.009] AreFileApisANSI () returned 1 [0223.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0223.144] CloseHandle (hObject=0x9c) returned 1 [0223.144] AreFileApisANSI () returned 1 [0223.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0223.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0223.144] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\qwCFJ0csnUB1gvy2j\\GnOXS.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qwcfj0csnub1gvy2j\\gnoxs.m4a"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\qwCFJ0csnUB1gvy2j\\GnOXS.m4a.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qwcfj0csnub1gvy2j\\gnoxs.m4a.cryptoid"), dwFlags=0x2) returned 1 [0223.146] AreFileApisANSI () returned 1 [0223.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0223.166] CloseHandle (hObject=0x9c) returned 1 [0223.166] AreFileApisANSI () returned 1 [0223.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0223.167] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0223.167] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\qwCFJ0csnUB1gvy2j\\uL gCKWK2.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qwcfj0csnub1gvy2j\\ul gckwk2.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\qwCFJ0csnUB1gvy2j\\uL gCKWK2.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qwcfj0csnub1gvy2j\\ul gckwk2.jpg.cryptoid"), dwFlags=0x2) returned 1 [0223.168] AreFileApisANSI () returned 1 [0223.168] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0223.537] CloseHandle (hObject=0x9c) returned 1 [0223.538] AreFileApisANSI () returned 1 [0223.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0223.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cd28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0223.538] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\qwCFJ0csnUB1gvy2j\\Z4yeM_X0KgLDrHHH.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qwcfj0csnub1gvy2j\\z4yem_x0kgldrhhh.csv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\qwCFJ0csnUB1gvy2j\\Z4yeM_X0KgLDrHHH.csv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qwcfj0csnub1gvy2j\\z4yem_x0kgldrhhh.csv.cryptoid"), dwFlags=0x2) returned 1 [0223.540] AreFileApisANSI () returned 1 [0223.540] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0224.244] CloseHandle (hObject=0x98) returned 1 [0224.244] AreFileApisANSI () returned 1 [0224.244] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0224.244] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495f70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0224.245] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\Sm8mV0SG.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\sm8mv0sg.swf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\Sm8mV0SG.swf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\sm8mv0sg.swf.cryptoid"), dwFlags=0x2) returned 1 [0224.246] AreFileApisANSI () returned 1 [0224.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0224.273] CloseHandle (hObject=0x98) returned 1 [0224.273] AreFileApisANSI () returned 1 [0224.273] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0224.273] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495a18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0224.274] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\SYWY1I7B-bT26Gow.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\sywy1i7b-bt26gow.flv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\SYWY1I7B-bT26Gow.flv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\sywy1i7b-bt26gow.flv.cryptoid"), dwFlags=0x2) returned 1 [0224.275] AreFileApisANSI () returned 1 [0224.275] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0224.276] CloseHandle (hObject=0x98) returned 1 [0224.276] AreFileApisANSI () returned 1 [0224.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0224.320] CloseHandle (hObject=0x98) returned 1 [0224.320] AreFileApisANSI () returned 1 [0224.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0224.321] CloseHandle (hObject=0x98) returned 1 [0224.322] AreFileApisANSI () returned 1 [0224.322] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0224.712] CloseHandle (hObject=0x9c) returned 1 [0224.712] AreFileApisANSI () returned 1 [0224.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0224.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ce30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0224.712] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\t 3iXS-Pn\\fh4KcsaRDZD94LOBYz.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\t 3ixs-pn\\fh4kcsardzd94lobyz.m4a"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\t 3iXS-Pn\\fh4KcsaRDZD94LOBYz.m4a.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\t 3ixs-pn\\fh4kcsardzd94lobyz.m4a.cryptoid"), dwFlags=0x2) returned 1 [0224.713] AreFileApisANSI () returned 1 [0224.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0224.731] CloseHandle (hObject=0x9c) returned 1 [0224.731] AreFileApisANSI () returned 1 [0224.731] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0224.731] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0224.731] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\t 3iXS-Pn\\M0auo 1-jgpva.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\t 3ixs-pn\\m0auo 1-jgpva.mp3"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\t 3iXS-Pn\\M0auo 1-jgpva.mp3.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\t 3ixs-pn\\m0auo 1-jgpva.mp3.cryptoid"), dwFlags=0x2) returned 1 [0224.732] AreFileApisANSI () returned 1 [0224.732] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0224.962] CloseHandle (hObject=0x9c) returned 1 [0224.994] AreFileApisANSI () returned 1 [0224.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0224.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495e98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0224.995] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\t 3iXS-Pn\\S9D2o.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\t 3ixs-pn\\s9d2o.flv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\t 3iXS-Pn\\S9D2o.flv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\t 3ixs-pn\\s9d2o.flv.cryptoid"), dwFlags=0x2) returned 1 [0225.028] AreFileApisANSI () returned 1 [0225.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0225.037] CloseHandle (hObject=0x9c) returned 1 [0225.049] AreFileApisANSI () returned 1 [0225.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0225.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cd28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0225.049] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\t 3iXS-Pn\\U8o3JM4TxHV3192Fc.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\t 3ixs-pn\\u8o3jm4txhv3192fc.pdf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\t 3iXS-Pn\\U8o3JM4TxHV3192Fc.pdf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\t 3ixs-pn\\u8o3jm4txhv3192fc.pdf.cryptoid"), dwFlags=0x2) returned 1 [0225.212] AreFileApisANSI () returned 1 [0225.212] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0225.361] CloseHandle (hObject=0x98) returned 1 [0225.392] AreFileApisANSI () returned 1 [0225.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0225.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495c10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0225.393] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\u1_kCFRPK1943i.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\u1_kcfrpk1943i.swf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\u1_kCFRPK1943i.swf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\u1_kcfrpk1943i.swf.cryptoid"), dwFlags=0x2) returned 1 [0225.411] AreFileApisANSI () returned 1 [0225.411] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0225.610] CloseHandle (hObject=0x98) returned 1 [0225.622] AreFileApisANSI () returned 1 [0225.622] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0225.622] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495e98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0225.622] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\uEhre.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\uehre.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\uEhre.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\uehre.jpg.cryptoid"), dwFlags=0x2) returned 1 [0225.649] AreFileApisANSI () returned 1 [0225.649] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0225.683] CloseHandle (hObject=0x98) returned 1 [0225.986] AreFileApisANSI () returned 1 [0225.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0225.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0225.987] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\waLBi.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\walbi.avi"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\waLBi.avi.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\walbi.avi.cryptoid"), dwFlags=0x2) returned 1 [0225.988] AreFileApisANSI () returned 1 [0225.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0226.001] CloseHandle (hObject=0x98) returned 1 [0226.001] AreFileApisANSI () returned 1 [0226.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0226.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4959d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0226.001] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\WEh_BKYON1i9Wd6o.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\weh_bkyon1i9wd6o.bmp"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\WEh_BKYON1i9Wd6o.bmp.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\weh_bkyon1i9wd6o.bmp.cryptoid"), dwFlags=0x2) returned 1 [0226.002] AreFileApisANSI () returned 1 [0226.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0226.460] CloseHandle (hObject=0x98) returned 1 [0226.461] AreFileApisANSI () returned 1 [0226.461] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0226.461] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495d30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0226.461] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\XYIZ6OjMX3dey-.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyiz6ojmx3dey-.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\XYIZ6OjMX3dey-.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyiz6ojmx3dey-.gif.cryptoid"), dwFlags=0x2) returned 1 [0226.464] AreFileApisANSI () returned 1 [0226.464] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0226.615] CloseHandle (hObject=0x98) returned 1 [0226.615] AreFileApisANSI () returned 1 [0226.615] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0226.615] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495b38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0226.615] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\YmHHb05_LrN9.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ymhhb05_lrn9.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Desktop\\YmHHb05_LrN9.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ymhhb05_lrn9.png.cryptoid"), dwFlags=0x2) returned 1 [0226.616] AreFileApisANSI () returned 1 [0226.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0226.617] CloseHandle (hObject=0x94) returned 1 [0226.617] AreFileApisANSI () returned 1 [0226.618] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0226.618] CloseHandle (hObject=0x94) returned 1 [0226.619] AreFileApisANSI () returned 1 [0226.619] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0226.642] CloseHandle (hObject=0x94) returned 1 [0226.666] AreFileApisANSI () returned 1 [0226.666] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0226.830] CloseHandle (hObject=0x98) returned 1 [0226.830] AreFileApisANSI () returned 1 [0226.830] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0226.830] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495ce8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0226.830] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\-1K72x5Ij.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\-1k72x5ij.xls"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\-1K72x5Ij.xls.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\-1k72x5ij.xls.cryptoid"), dwFlags=0x2) returned 1 [0226.832] AreFileApisANSI () returned 1 [0226.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0226.880] CloseHandle (hObject=0x98) returned 1 [0226.880] AreFileApisANSI () returned 1 [0226.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0226.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d1a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0226.880] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\5VqEmoRb0DxJqvJhGO5.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\5vqemorb0dxjqvjhgo5.rtf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\5VqEmoRb0DxJqvJhGO5.rtf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\5vqemorb0dxjqvjhgo5.rtf.cryptoid"), dwFlags=0x2) returned 1 [0226.882] AreFileApisANSI () returned 1 [0226.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0226.918] CloseHandle (hObject=0x98) returned 1 [0226.918] AreFileApisANSI () returned 1 [0226.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0226.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495e98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0226.918] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\8CPymYh3.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\8cpymyh3.xlsx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\8CPymYh3.xlsx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\8cpymyh3.xlsx.cryptoid"), dwFlags=0x2) returned 1 [0226.928] AreFileApisANSI () returned 1 [0226.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0227.092] CloseHandle (hObject=0x98) returned 1 [0227.093] AreFileApisANSI () returned 1 [0227.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0227.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495af0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0227.093] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\BTlsAhDn.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\btlsahdn.docx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\BTlsAhDn.docx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\btlsahdn.docx.cryptoid"), dwFlags=0x2) returned 1 [0227.095] AreFileApisANSI () returned 1 [0227.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0227.211] CloseHandle (hObject=0x98) returned 1 [0227.211] AreFileApisANSI () returned 1 [0227.211] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0227.211] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495d78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0227.211] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\bxwRaDDAhK9e.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\bxwraddahk9e.pptx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\bxwRaDDAhK9e.pptx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\bxwraddahk9e.pptx.cryptoid"), dwFlags=0x2) returned 1 [0227.213] AreFileApisANSI () returned 1 [0227.213] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0227.304] CloseHandle (hObject=0x98) returned 1 [0227.304] AreFileApisANSI () returned 1 [0227.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0227.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495b38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0227.304] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\CFXNB.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\cfxnb.xlsx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\CFXNB.xlsx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\cfxnb.xlsx.cryptoid"), dwFlags=0x2) returned 1 [0227.315] AreFileApisANSI () returned 1 [0227.315] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0228.098] CloseHandle (hObject=0x98) returned 1 [0228.100] AreFileApisANSI () returned 1 [0228.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0228.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0228.100] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb.cryptoid"), dwFlags=0x2) returned 1 [0228.102] AreFileApisANSI () returned 1 [0228.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0228.106] CloseHandle (hObject=0x98) returned 1 [0228.106] AreFileApisANSI () returned 1 [0228.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0228.107] CloseHandle (hObject=0x98) returned 1 [0228.108] AreFileApisANSI () returned 1 [0228.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0228.109] CloseHandle (hObject=0x98) returned 1 [0228.109] AreFileApisANSI () returned 1 [0228.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0228.245] CloseHandle (hObject=0x9c) returned 1 [0228.246] AreFileApisANSI () returned 1 [0228.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0228.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0228.246] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\1UCrNU_TbWlVSHEPMFv.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\1ucrnu_tbwlvshepmfv.odp"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\1UCrNU_TbWlVSHEPMFv.odp.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\1ucrnu_tbwlvshepmfv.odp.cryptoid"), dwFlags=0x2) returned 1 [0228.247] AreFileApisANSI () returned 1 [0228.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0228.269] CloseHandle (hObject=0x9c) returned 1 [0228.269] AreFileApisANSI () returned 1 [0228.269] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0228.269] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d1f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0228.269] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\CeWPdD6Fw5a.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\cewpdd6fw5a.docx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\CeWPdD6Fw5a.docx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\cewpdd6fw5a.docx.cryptoid"), dwFlags=0x2) returned 1 [0228.270] AreFileApisANSI () returned 1 [0228.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0228.379] CloseHandle (hObject=0x9c) returned 1 [0228.380] AreFileApisANSI () returned 1 [0228.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0228.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ce88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0228.380] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\Yh0B2GaC.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\yh0b2gac.docx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\Yh0B2GaC.docx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\yh0b2gac.docx.cryptoid"), dwFlags=0x2) returned 1 [0228.382] AreFileApisANSI () returned 1 [0228.382] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0228.473] CloseHandle (hObject=0x9c) returned 1 [0228.474] AreFileApisANSI () returned 1 [0228.474] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0228.474] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ce30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0228.474] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\yLYbwl1IB.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ylybwl1ib.ods"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\yLYbwl1IB.ods.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ylybwl1ib.ods.cryptoid"), dwFlags=0x2) returned 1 [0228.475] AreFileApisANSI () returned 1 [0228.487] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0228.495] CloseHandle (hObject=0x9c) returned 1 [0228.495] AreFileApisANSI () returned 1 [0228.495] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0228.496] CloseHandle (hObject=0x9c) returned 1 [0228.497] AreFileApisANSI () returned 1 [0228.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0228.498] CloseHandle (hObject=0x9c) returned 1 [0228.498] AreFileApisANSI () returned 1 [0228.498] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0228.598] CloseHandle (hObject=0xa0) returned 1 [0228.599] AreFileApisANSI () returned 1 [0228.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0228.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0228.599] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\3hqHo3gaNj5LVdbX.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\3hqho3ganj5lvdbx.xls"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\3hqHo3gaNj5LVdbX.xls.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\3hqho3ganj5lvdbx.xls.cryptoid"), dwFlags=0x2) returned 1 [0228.602] AreFileApisANSI () returned 1 [0228.602] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0228.711] CloseHandle (hObject=0xa0) returned 1 [0228.712] AreFileApisANSI () returned 1 [0228.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0228.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d2a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0228.712] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\Dcli1HeH.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\dcli1heh.docx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\Dcli1HeH.docx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\dcli1heh.docx.cryptoid"), dwFlags=0x2) returned 1 [0228.713] AreFileApisANSI () returned 1 [0228.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4984a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0228.716] CloseHandle (hObject=0xa0) returned 1 [0228.716] AreFileApisANSI () returned 1 [0228.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4985a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0228.717] CloseHandle (hObject=0xa0) returned 1 [0228.718] AreFileApisANSI () returned 1 [0228.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0228.718] CloseHandle (hObject=0xa0) returned 1 [0228.719] AreFileApisANSI () returned 1 [0228.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0228.869] CloseHandle (hObject=0xa4) returned 1 [0228.870] AreFileApisANSI () returned 1 [0228.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0228.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0228.870] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\gv1c7CUUWr xV1h\\7WMT64Cs.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\gv1c7cuuwr xv1h\\7wmt64cs.xls"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\gv1c7CUUWr xV1h\\7WMT64Cs.xls.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\gv1c7cuuwr xv1h\\7wmt64cs.xls.cryptoid"), dwFlags=0x2) returned 1 [0228.871] AreFileApisANSI () returned 1 [0228.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0228.925] CloseHandle (hObject=0xa4) returned 1 [0228.926] AreFileApisANSI () returned 1 [0228.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0228.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0228.926] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\gv1c7CUUWr xV1h\\amKZ_.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\gv1c7cuuwr xv1h\\amkz_.ods"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\gv1c7CUUWr xV1h\\amKZ_.ods.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\gv1c7cuuwr xv1h\\amkz_.ods.cryptoid"), dwFlags=0x2) returned 1 [0228.927] AreFileApisANSI () returned 1 [0228.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0228.985] CloseHandle (hObject=0xa4) returned 1 [0228.985] AreFileApisANSI () returned 1 [0228.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0228.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0228.985] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\gv1c7CUUWr xV1h\\aNAe.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\gv1c7cuuwr xv1h\\anae.docx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\gv1c7CUUWr xV1h\\aNAe.docx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\gv1c7cuuwr xv1h\\anae.docx.cryptoid"), dwFlags=0x2) returned 1 [0228.987] AreFileApisANSI () returned 1 [0228.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0228.999] CloseHandle (hObject=0xa4) returned 1 [0228.999] AreFileApisANSI () returned 1 [0228.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0228.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493e70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0228.999] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\gv1c7CUUWr xV1h\\eBfGQxTy5zn088a_4A.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\gv1c7cuuwr xv1h\\ebfgqxty5zn088a_4a.docx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\gv1c7CUUWr xV1h\\eBfGQxTy5zn088a_4A.docx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\gv1c7cuuwr xv1h\\ebfgqxty5zn088a_4a.docx.cryptoid"), dwFlags=0x2) returned 1 [0229.001] AreFileApisANSI () returned 1 [0229.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0229.014] CloseHandle (hObject=0xa4) returned 1 [0229.015] AreFileApisANSI () returned 1 [0229.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0229.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4939c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0229.015] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\gv1c7CUUWr xV1h\\fgTGUa2C7j7gAPbmnSbQ.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\gv1c7cuuwr xv1h\\fgtgua2c7j7gapbmnsbq.ots"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\gv1c7CUUWr xV1h\\fgTGUa2C7j7gAPbmnSbQ.ots.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\gv1c7cuuwr xv1h\\fgtgua2c7j7gapbmnsbq.ots.cryptoid"), dwFlags=0x2) returned 1 [0229.016] AreFileApisANSI () returned 1 [0229.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0229.068] CloseHandle (hObject=0xa4) returned 1 [0229.074] AreFileApisANSI () returned 1 [0229.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0229.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493b28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0229.075] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\gv1c7CUUWr xV1h\\FTuskypsgPe.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\gv1c7cuuwr xv1h\\ftuskypsgpe.ods"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\gv1c7CUUWr xV1h\\FTuskypsgPe.ods.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\gv1c7cuuwr xv1h\\ftuskypsgpe.ods.cryptoid"), dwFlags=0x2) returned 1 [0229.076] AreFileApisANSI () returned 1 [0229.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0229.163] CloseHandle (hObject=0xa4) returned 1 [0229.163] AreFileApisANSI () returned 1 [0229.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0229.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0229.163] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\gv1c7CUUWr xV1h\\QSO5Cw.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\gv1c7cuuwr xv1h\\qso5cw.pdf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\gv1c7CUUWr xV1h\\QSO5Cw.pdf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\gv1c7cuuwr xv1h\\qso5cw.pdf.cryptoid"), dwFlags=0x2) returned 1 [0229.164] AreFileApisANSI () returned 1 [0229.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0229.245] CloseHandle (hObject=0xa4) returned 1 [0229.245] AreFileApisANSI () returned 1 [0229.245] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0229.245] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493df8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0229.245] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\gv1c7CUUWr xV1h\\wU329wdzQaz.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\gv1c7cuuwr xv1h\\wu329wdzqaz.pps"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\gv1c7CUUWr xV1h\\wU329wdzQaz.pps.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\gv1c7cuuwr xv1h\\wu329wdzqaz.pps.cryptoid"), dwFlags=0x2) returned 1 [0229.246] AreFileApisANSI () returned 1 [0229.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498828, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0229.251] CloseHandle (hObject=0xa0) returned 1 [0229.251] AreFileApisANSI () returned 1 [0229.251] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498228, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0229.252] CloseHandle (hObject=0xa0) returned 1 [0229.252] AreFileApisANSI () returned 1 [0229.252] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0229.253] CloseHandle (hObject=0xa0) returned 1 [0229.253] AreFileApisANSI () returned 1 [0229.253] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0229.313] CloseHandle (hObject=0xa4) returned 1 [0229.313] AreFileApisANSI () returned 1 [0229.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0229.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0229.313] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\ntyKi7r\\5VV5LQjgDe8c8h.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\ntyki7r\\5vv5lqjgde8c8h.pptx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\ntyKi7r\\5VV5LQjgDe8c8h.pptx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\ntyki7r\\5vv5lqjgde8c8h.pptx.cryptoid"), dwFlags=0x2) returned 1 [0229.314] AreFileApisANSI () returned 1 [0229.314] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0229.320] CloseHandle (hObject=0xa4) returned 1 [0229.320] AreFileApisANSI () returned 1 [0229.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0229.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0229.320] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\ntyKi7r\\fowjpic8ZW.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\ntyki7r\\fowjpic8zw.odp"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\ntyKi7r\\fowjpic8ZW.odp.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\ntyki7r\\fowjpic8zw.odp.cryptoid"), dwFlags=0x2) returned 1 [0229.321] AreFileApisANSI () returned 1 [0229.321] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0229.488] CloseHandle (hObject=0xa4) returned 1 [0229.488] AreFileApisANSI () returned 1 [0229.488] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0229.488] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4939c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0229.488] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\ntyKi7r\\gqxQZ2HS095Tw_Q924ZC.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\ntyki7r\\gqxqz2hs095tw_q924zc.pps"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\ntyKi7r\\gqxQZ2HS095Tw_Q924ZC.pps.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\ntyki7r\\gqxqz2hs095tw_q924zc.pps.cryptoid"), dwFlags=0x2) returned 1 [0229.489] AreFileApisANSI () returned 1 [0229.489] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0229.514] CloseHandle (hObject=0xa4) returned 1 [0229.514] AreFileApisANSI () returned 1 [0229.514] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0229.514] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0229.514] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\ntyKi7r\\Z2B5rKC.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\ntyki7r\\z2b5rkc.odp"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\ntyKi7r\\Z2B5rKC.odp.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\ntyki7r\\z2b5rkc.odp.cryptoid"), dwFlags=0x2) returned 1 [0229.516] AreFileApisANSI () returned 1 [0229.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0229.678] CloseHandle (hObject=0xa0) returned 1 [0229.680] AreFileApisANSI () returned 1 [0229.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0229.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0229.681] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\Vsb4vbwkisLPdhn9zAQT.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\vsb4vbwkislpdhn9zaqt.docx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\Vsb4vbwkisLPdhn9zAQT.docx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\vsb4vbwkislpdhn9zaqt.docx.cryptoid"), dwFlags=0x2) returned 1 [0229.681] AreFileApisANSI () returned 1 [0229.681] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0229.841] CloseHandle (hObject=0xa0) returned 1 [0229.842] AreFileApisANSI () returned 1 [0229.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0229.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0229.842] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\YoENg.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\yoeng.rtf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\YoENg.rtf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\yoeng.rtf.cryptoid"), dwFlags=0x2) returned 1 [0229.843] AreFileApisANSI () returned 1 [0229.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0229.846] CloseHandle (hObject=0xa0) returned 1 [0229.846] AreFileApisANSI () returned 1 [0229.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0229.847] CloseHandle (hObject=0xa0) returned 1 [0229.847] AreFileApisANSI () returned 1 [0229.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0229.848] CloseHandle (hObject=0xa0) returned 1 [0229.848] AreFileApisANSI () returned 1 [0229.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0229.859] CloseHandle (hObject=0xa4) returned 1 [0229.859] AreFileApisANSI () returned 1 [0229.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0229.860] CloseHandle (hObject=0xa4) returned 1 [0229.860] AreFileApisANSI () returned 1 [0229.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 110 [0229.861] CloseHandle (hObject=0xa4) returned 1 [0229.861] AreFileApisANSI () returned 1 [0229.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0229.963] CloseHandle (hObject=0xa8) returned 1 [0229.964] AreFileApisANSI () returned 1 [0229.964] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0229.964] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a2cf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0229.964] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\YQoxZ5vpBJg\\6i77cWrTVq ebX3l8g8l\\gTc-v-q4jRLrdB6xr9.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\yqoxz5vpbjg\\6i77cwrtvq ebx3l8g8l\\gtc-v-q4jrlrdb6xr9.rtf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\YQoxZ5vpBJg\\6i77cWrTVq ebX3l8g8l\\gTc-v-q4jRLrdB6xr9.rtf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\yqoxz5vpbjg\\6i77cwrtvq ebx3l8g8l\\gtc-v-q4jrlrdb6xr9.rtf.cryptoid"), dwFlags=0x2) returned 1 [0229.965] AreFileApisANSI () returned 1 [0229.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0230.050] CloseHandle (hObject=0xa8) returned 1 [0230.050] AreFileApisANSI () returned 1 [0230.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0230.050] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493948, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0230.050] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\YQoxZ5vpBJg\\6i77cWrTVq ebX3l8g8l\\Vcgw.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\yqoxz5vpbjg\\6i77cwrtvq ebx3l8g8l\\vcgw.odt"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\YQoxZ5vpBJg\\6i77cWrTVq ebX3l8g8l\\Vcgw.odt.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\yqoxz5vpbjg\\6i77cwrtvq ebx3l8g8l\\vcgw.odt.cryptoid"), dwFlags=0x2) returned 1 [0230.052] AreFileApisANSI () returned 1 [0230.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0230.075] CloseHandle (hObject=0xa4) returned 1 [0230.075] AreFileApisANSI () returned 1 [0230.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0230.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493ba0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0230.075] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\YQoxZ5vpBJg\\rnkf7YHy9dpu1tE.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\yqoxz5vpbjg\\rnkf7yhy9dpu1te.docx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\YQoxZ5vpBJg\\rnkf7YHy9dpu1tE.docx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\yqoxz5vpbjg\\rnkf7yhy9dpu1te.docx.cryptoid"), dwFlags=0x2) returned 1 [0230.076] AreFileApisANSI () returned 1 [0230.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0230.122] CloseHandle (hObject=0xa4) returned 1 [0230.122] AreFileApisANSI () returned 1 [0230.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0230.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0230.122] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\YQoxZ5vpBJg\\s4Kg.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\yqoxz5vpbjg\\s4kg.ots"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\YQoxZ5vpBJg\\s4Kg.ots.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\yqoxz5vpbjg\\s4kg.ots.cryptoid"), dwFlags=0x2) returned 1 [0230.123] AreFileApisANSI () returned 1 [0230.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0230.126] CloseHandle (hObject=0xa4) returned 1 [0230.126] AreFileApisANSI () returned 1 [0230.126] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0230.127] CloseHandle (hObject=0xa4) returned 1 [0230.127] AreFileApisANSI () returned 1 [0230.127] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0230.128] CloseHandle (hObject=0xa4) returned 1 [0230.128] AreFileApisANSI () returned 1 [0230.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0230.172] CloseHandle (hObject=0xa8) returned 1 [0230.173] AreFileApisANSI () returned 1 [0230.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0230.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a31c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0230.173] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\YQoxZ5vpBJg\\vUHnWX1t2puMFJf\\SAD7u4Ndx3HRdFq4Tl.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\yqoxz5vpbjg\\vuhnwx1t2pumfjf\\sad7u4ndx3hrdfq4tl.odp"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\YQoxZ5vpBJg\\vUHnWX1t2puMFJf\\SAD7u4Ndx3HRdFq4Tl.odp.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\yqoxz5vpbjg\\vuhnwx1t2pumfjf\\sad7u4ndx3hrdfq4tl.odp.cryptoid"), dwFlags=0x2) returned 1 [0230.174] AreFileApisANSI () returned 1 [0230.174] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0230.175] CloseHandle (hObject=0xa8) returned 1 [0230.176] AreFileApisANSI () returned 1 [0230.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0230.178] CloseHandle (hObject=0xa8) returned 1 [0230.179] AreFileApisANSI () returned 1 [0230.179] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ff98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0230.180] CloseHandle (hObject=0xa8) returned 1 [0230.180] AreFileApisANSI () returned 1 [0230.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0230.207] CloseHandle (hObject=0xac) returned 1 [0230.207] AreFileApisANSI () returned 1 [0230.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3da960, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0230.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a01f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 129 [0230.207] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\YQoxZ5vpBJg\\vUHnWX1t2puMFJf\\vV_CIGgUjb\\-x_msCGBea4jSwZkj_vJ.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\yqoxz5vpbjg\\vuhnwx1t2pumfjf\\vv_ciggujb\\-x_mscgbea4jswzkj_vj.xls"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\YQoxZ5vpBJg\\vUHnWX1t2puMFJf\\vV_CIGgUjb\\-x_msCGBea4jSwZkj_vJ.xls.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\yqoxz5vpbjg\\vuhnwx1t2pumfjf\\vv_ciggujb\\-x_mscgbea4jswzkj_vj.xls.cryptoid"), dwFlags=0x2) returned 1 [0230.208] AreFileApisANSI () returned 1 [0230.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0230.217] CloseHandle (hObject=0xa4) returned 1 [0230.217] AreFileApisANSI () returned 1 [0230.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0230.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493948, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0230.217] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\YQoxZ5vpBJg\\XpkF5-Pe6B0x7Q76DHD.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\yqoxz5vpbjg\\xpkf5-pe6b0x7q76dhd.ots"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\DSV3gqYof3Efgm\\YMrJZOF\\YQoxZ5vpBJg\\XpkF5-Pe6B0x7Q76DHD.ots.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dsv3gqyof3efgm\\ymrjzof\\yqoxz5vpbjg\\xpkf5-pe6b0x7q76dhd.ots.cryptoid"), dwFlags=0x2) returned 1 [0230.218] AreFileApisANSI () returned 1 [0230.218] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0230.288] CloseHandle (hObject=0x98) returned 1 [0230.289] AreFileApisANSI () returned 1 [0230.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0230.289] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495f70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0230.289] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\E27Yl 6mzLK_.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\e27yl 6mzlk_.docx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\E27Yl 6mzLK_.docx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\e27yl 6mzlk_.docx.cryptoid"), dwFlags=0x2) returned 1 [0230.290] AreFileApisANSI () returned 1 [0230.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0230.372] CloseHandle (hObject=0x98) returned 1 [0230.372] AreFileApisANSI () returned 1 [0230.372] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0230.372] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495e50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0230.372] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\ffwt-sq0W.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ffwt-sq0w.pdf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\ffwt-sq0W.pdf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ffwt-sq0w.pdf.cryptoid"), dwFlags=0x2) returned 1 [0230.373] AreFileApisANSI () returned 1 [0230.373] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0230.395] CloseHandle (hObject=0x98) returned 1 [0230.395] AreFileApisANSI () returned 1 [0230.395] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0230.395] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0230.395] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\fuOAcHclQM2QsxVV2wgA.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fuoachclqm2qsxvv2wga.docx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\fuOAcHclQM2QsxVV2wgA.docx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fuoachclqm2qsxvv2wga.docx.cryptoid"), dwFlags=0x2) returned 1 [0230.396] AreFileApisANSI () returned 1 [0230.396] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0230.601] CloseHandle (hObject=0x98) returned 1 [0230.601] AreFileApisANSI () returned 1 [0230.601] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0230.601] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0230.601] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\hwlUF8.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\hwluf8.docx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\hwlUF8.docx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\hwluf8.docx.cryptoid"), dwFlags=0x2) returned 1 [0230.602] AreFileApisANSI () returned 1 [0230.602] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0230.629] CloseHandle (hObject=0x98) returned 1 [0230.629] AreFileApisANSI () returned 1 [0230.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0230.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495c58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0230.629] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\i7NkvCeuXb.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\i7nkvceuxb.pptx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\i7NkvCeuXb.pptx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\i7nkvceuxb.pptx.cryptoid"), dwFlags=0x2) returned 1 [0230.630] AreFileApisANSI () returned 1 [0230.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0230.729] CloseHandle (hObject=0x98) returned 1 [0230.729] AreFileApisANSI () returned 1 [0230.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0230.729] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495d30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0230.729] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\iLkt34TC1yJSP1A5.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ilkt34tc1yjsp1a5.pptx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\iLkt34TC1yJSP1A5.pptx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ilkt34tc1yjsp1a5.pptx.cryptoid"), dwFlags=0x2) returned 1 [0230.730] AreFileApisANSI () returned 1 [0230.730] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0230.733] CloseHandle (hObject=0x98) returned 1 [0230.733] AreFileApisANSI () returned 1 [0230.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0230.734] CloseHandle (hObject=0x98) returned 1 [0230.734] AreFileApisANSI () returned 1 [0230.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0230.735] CloseHandle (hObject=0x98) returned 1 [0230.735] AreFileApisANSI () returned 1 [0230.735] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0230.840] CloseHandle (hObject=0x9c) returned 1 [0230.840] AreFileApisANSI () returned 1 [0230.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0230.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0230.840] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\l5Zzm8\\8sBxOiMMnYNIXd8mXaE.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\l5zzm8\\8sbxoimmnynixd8mxae.xlsx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\l5Zzm8\\8sBxOiMMnYNIXd8mXaE.xlsx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\l5zzm8\\8sbxoimmnynixd8mxae.xlsx.cryptoid"), dwFlags=0x2) returned 1 [0230.841] AreFileApisANSI () returned 1 [0230.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0230.876] CloseHandle (hObject=0x9c) returned 1 [0230.876] AreFileApisANSI () returned 1 [0230.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0230.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cf90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0230.876] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\l5Zzm8\\9cC3oHXiWDu.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\l5zzm8\\9cc3ohxiwdu.xls"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\l5Zzm8\\9cC3oHXiWDu.xls.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\l5zzm8\\9cc3ohxiwdu.xls.cryptoid"), dwFlags=0x2) returned 1 [0230.877] AreFileApisANSI () returned 1 [0230.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0230.957] CloseHandle (hObject=0x9c) returned 1 [0230.958] AreFileApisANSI () returned 1 [0230.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0230.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ce30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0230.958] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\l5Zzm8\\DyV-vJvPj31j_.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\l5zzm8\\dyv-vjvpj31j_.pps"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\l5Zzm8\\DyV-vJvPj31j_.pps.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\l5zzm8\\dyv-vjvpj31j_.pps.cryptoid"), dwFlags=0x2) returned 1 [0230.959] AreFileApisANSI () returned 1 [0230.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0230.972] CloseHandle (hObject=0x9c) returned 1 [0230.972] AreFileApisANSI () returned 1 [0230.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0230.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0230.972] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\l5Zzm8\\g2b52R1G71nJz.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\l5zzm8\\g2b52r1g71njz.pdf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\l5Zzm8\\g2b52R1G71nJz.pdf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\l5zzm8\\g2b52r1g71njz.pdf.cryptoid"), dwFlags=0x2) returned 1 [0230.973] AreFileApisANSI () returned 1 [0230.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0231.091] CloseHandle (hObject=0x9c) returned 1 [0231.091] AreFileApisANSI () returned 1 [0231.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0231.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0231.091] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\l5Zzm8\\H47DoL8_8.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\l5zzm8\\h47dol8_8.pps"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\l5Zzm8\\H47DoL8_8.pps.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\l5zzm8\\h47dol8_8.pps.cryptoid"), dwFlags=0x2) returned 1 [0231.092] AreFileApisANSI () returned 1 [0231.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0231.094] CloseHandle (hObject=0x98) returned 1 [0231.094] AreFileApisANSI () returned 1 [0231.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0231.095] CloseHandle (hObject=0x98) returned 1 [0231.095] AreFileApisANSI () returned 1 [0231.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0231.096] CloseHandle (hObject=0x98) returned 1 [0231.096] AreFileApisANSI () returned 1 [0231.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ce88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0231.097] CloseHandle (hObject=0x98) returned 1 [0231.097] AreFileApisANSI () returned 1 [0231.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0231.099] CloseHandle (hObject=0x98) returned 1 [0231.099] AreFileApisANSI () returned 1 [0231.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d0f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0231.100] CloseHandle (hObject=0x98) returned 1 [0231.102] AreFileApisANSI () returned 1 [0231.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0231.105] CloseHandle (hObject=0x98) returned 1 [0231.105] AreFileApisANSI () returned 1 [0231.105] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0231.106] CloseHandle (hObject=0x98) returned 1 [0231.106] AreFileApisANSI () returned 1 [0231.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0231.110] CloseHandle (hObject=0x98) returned 1 [0231.110] AreFileApisANSI () returned 1 [0231.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0231.111] CloseHandle (hObject=0x9c) returned 1 [0231.111] AreFileApisANSI () returned 1 [0231.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0231.112] CloseHandle (hObject=0x9c) returned 1 [0231.112] AreFileApisANSI () returned 1 [0231.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0231.116] CloseHandle (hObject=0x9c) returned 1 [0231.116] AreFileApisANSI () returned 1 [0231.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0231.121] CloseHandle (hObject=0x98) returned 1 [0231.121] AreFileApisANSI () returned 1 [0231.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0231.122] CloseHandle (hObject=0x98) returned 1 [0231.122] AreFileApisANSI () returned 1 [0231.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0231.123] CloseHandle (hObject=0x98) returned 1 [0231.123] AreFileApisANSI () returned 1 [0231.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0231.207] CloseHandle (hObject=0x98) returned 1 [0231.207] AreFileApisANSI () returned 1 [0231.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0231.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495b38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0231.207] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\oAgbarWFOfK5F.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\oagbarwfofk5f.xlsx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\oAgbarWFOfK5F.xlsx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\oagbarwfofk5f.xlsx.cryptoid"), dwFlags=0x2) returned 1 [0231.208] AreFileApisANSI () returned 1 [0231.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0231.209] CloseHandle (hObject=0x98) returned 1 [0231.209] AreFileApisANSI () returned 1 [0231.209] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0231.214] CloseHandle (hObject=0x98) returned 1 [0231.214] AreFileApisANSI () returned 1 [0231.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0231.215] CloseHandle (hObject=0x98) returned 1 [0231.215] AreFileApisANSI () returned 1 [0231.215] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0231.218] CloseHandle (hObject=0x9c) returned 1 [0231.218] AreFileApisANSI () returned 1 [0231.218] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0231.219] CloseHandle (hObject=0x9c) returned 1 [0231.219] AreFileApisANSI () returned 1 [0231.219] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0231.220] CloseHandle (hObject=0x9c) returned 1 [0231.221] AreFileApisANSI () returned 1 [0231.221] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0231.246] CloseHandle (hObject=0xa0) returned 1 [0231.246] AreFileApisANSI () returned 1 [0231.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0231.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0231.246] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2.cryptoid"), dwFlags=0x2) returned 1 [0231.248] AreFileApisANSI () returned 1 [0231.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0231.734] CloseHandle (hObject=0xa0) returned 1 [0231.734] AreFileApisANSI () returned 1 [0231.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0231.735] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0231.735] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one.cryptoid"), dwFlags=0x2) returned 1 [0231.736] AreFileApisANSI () returned 1 [0231.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cfe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0231.736] GetFileType (hFile=0x98) returned 0x1 [0231.736] WriteFile (in: hFile=0x98, lpBuffer=0x3db320*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3db318, lpOverlapped=0x0 | out: lpBuffer=0x3db320*, lpNumberOfBytesWritten=0x3db318*=0x423, lpOverlapped=0x0) returned 1 [0231.738] CloseHandle (hObject=0x98) returned 1 [0231.738] AreFileApisANSI () returned 1 [0231.738] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d300, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0231.738] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\CRYPTOID_HELP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0231.749] GetFileType (hFile=0x98) returned 0x1 [0231.749] WriteFile (in: hFile=0x98, lpBuffer=0x3db320*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3db318, lpOverlapped=0x0 | out: lpBuffer=0x3db320*, lpNumberOfBytesWritten=0x3db318*=0x423, lpOverlapped=0x0) returned 1 [0231.750] CloseHandle (hObject=0x98) returned 1 [0231.750] AreFileApisANSI () returned 1 [0231.750] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cdd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0231.750] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0231.751] GetFileType (hFile=0x98) returned 0x1 [0231.751] WriteFile (in: hFile=0x98, lpBuffer=0x3db320*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x3db318, lpOverlapped=0x0 | out: lpBuffer=0x3db320*, lpNumberOfBytesWritten=0x3db318*=0x423, lpOverlapped=0x0) returned 1 [0231.751] CloseHandle (hObject=0x98) returned 1 [0231.752] FindFirstFileA (in: lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x4948e0 [0231.752] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0231.752] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0231.752] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0231.752] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0231.752] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0231.752] AreFileApisANSI () returned 1 [0231.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0231.752] CreateFileW (lpFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc638, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c [0231.753] GetFileType (hFile=0x9c) returned 0x1 [0231.753] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e8 | out: lpNewFilePointer=0x0) returned 1 [0231.753] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc69c | out: lpNewFilePointer=0x0) returned 1 [0231.753] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6cc | out: lpNewFilePointer=0x0) returned 1 [0231.753] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.753] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.753] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6cc | out: lpNewFilePointer=0x0) returned 1 [0231.753] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.753] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.753] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.756] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.756] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.756] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.757] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.757] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.757] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.757] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.757] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.757] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.757] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.757] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.757] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.757] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.758] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.758] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.758] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.758] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.758] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.758] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.758] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.758] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.759] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.759] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.759] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.759] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.759] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.759] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.759] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.759] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.759] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.759] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.759] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.760] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.760] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.760] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.760] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.760] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.760] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.760] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.760] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.760] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.760] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.760] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.761] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.761] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.761] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.761] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.761] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.761] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.761] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.761] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.761] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.761] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.761] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.761] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.762] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.762] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.762] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.762] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.762] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.762] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.762] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.762] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.762] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.762] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.762] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.762] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.763] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.763] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.763] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.763] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.763] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.763] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.763] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.763] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.763] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.763] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.763] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.763] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.764] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.764] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.764] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.764] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.764] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.764] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.764] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.764] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.764] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.764] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.764] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.764] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.765] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.765] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.765] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.765] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.765] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.765] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.765] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.765] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.765] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.765] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.765] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.765] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.766] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.766] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.766] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.766] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.766] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.766] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.766] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.766] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.766] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.766] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.766] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.767] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.767] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.767] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.767] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.767] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.767] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.767] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.767] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.767] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.767] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.767] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.767] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.768] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.768] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.768] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.768] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.768] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.768] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.768] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.768] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.768] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.768] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.768] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.769] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.769] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.769] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.769] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.769] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.769] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.769] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.769] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.769] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.769] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.769] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.769] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.770] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.770] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.770] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.770] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.770] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.770] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.770] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.770] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.770] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.770] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.770] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.770] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.771] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.771] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.771] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.771] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.771] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.771] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.771] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.771] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.771] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.771] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.771] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.771] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.772] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.772] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.772] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.772] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.772] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.772] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.772] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.772] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.772] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.772] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.772] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.772] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.773] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.773] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.773] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.773] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.773] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.773] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.773] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.773] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.773] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.773] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.773] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.774] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.774] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.774] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.791] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.791] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.791] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.791] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.792] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.792] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.792] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.792] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.792] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.792] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.792] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.792] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.792] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.792] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.793] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.793] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.793] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.793] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.793] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.793] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.793] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.793] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.793] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.793] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.793] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.794] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.794] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.794] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.794] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.794] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.794] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.794] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.794] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.794] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.795] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.795] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.795] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.795] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.795] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.795] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.795] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.795] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.795] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.795] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.796] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.796] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.796] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.796] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.796] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.796] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.796] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.796] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.796] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.796] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.797] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.797] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.797] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.797] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.797] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.797] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.797] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.797] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.797] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.797] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.797] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.797] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.798] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.798] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.798] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.798] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.798] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.798] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.798] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.798] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.798] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.798] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.798] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.798] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.799] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.799] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.799] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.799] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.799] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.799] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.799] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.799] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.799] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.799] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.799] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.799] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.800] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.800] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0231.800] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc698 | out: lpNewFilePointer=0x0) returned 1 [0231.800] WriteFile (in: hFile=0x9c, lpBuffer=0x4aad48*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesWritten=0x3dc664*=0x8, lpOverlapped=0x0) returned 1 [0231.800] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6c0 | out: lpNewFilePointer=0x0) returned 1 [0231.800] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc654 | out: lpNewFilePointer=0x0) returned 1 [0231.800] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d0 | out: lpNewFilePointer=0x0) returned 1 [0231.800] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc684 | out: lpNewFilePointer=0x0) returned 1 [0231.800] ReadFile (in: hFile=0x9c, lpBuffer=0x4aad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3dc664, lpOverlapped=0x0 | out: lpBuffer=0x4aad48*, lpNumberOfBytesRead=0x3dc664*=0x1000, lpOverlapped=0x0) returned 1 [0231.800] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6d4 | out: lpNewFilePointer=0x0) returned 1 [0231.800] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc668 | out: lpNewFilePointer=0x0) returned 1 [0231.800] SetFilePointerEx (in: hFile=0x9c, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x3dc6e4 | out: lpNewFilePointer=0x0) returned 1 [0232.093] CloseHandle (hObject=0x9c) returned 1 [0232.093] AreFileApisANSI () returned 1 [0232.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0232.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d0f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0232.093] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst.cryptoid"), dwFlags=0x2) returned 1 [0232.094] AreFileApisANSI () returned 1 [0232.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0232.100] CloseHandle (hObject=0x98) returned 1 [0232.101] AreFileApisANSI () returned 1 [0232.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0232.102] CloseHandle (hObject=0x98) returned 1 [0232.102] AreFileApisANSI () returned 1 [0232.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0232.103] CloseHandle (hObject=0x98) returned 1 [0232.103] AreFileApisANSI () returned 1 [0232.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0232.117] CloseHandle (hObject=0x9c) returned 1 [0232.117] AreFileApisANSI () returned 1 [0232.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0232.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495f70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0232.117] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\oyqb\\B1WpeJjp 7.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\oyqb\\b1wpejjp 7.ods"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\oyqb\\B1WpeJjp 7.ods.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\oyqb\\b1wpejjp 7.ods.cryptoid"), dwFlags=0x2) returned 1 [0232.120] AreFileApisANSI () returned 1 [0232.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0232.156] CloseHandle (hObject=0x9c) returned 1 [0232.156] AreFileApisANSI () returned 1 [0232.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0232.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d2a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0232.156] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\oyqb\\Jz-_a7ppvntpaO.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\oyqb\\jz-_a7ppvntpao.pps"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\oyqb\\Jz-_a7ppvntpaO.pps.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\oyqb\\jz-_a7ppvntpao.pps.cryptoid"), dwFlags=0x2) returned 1 [0232.157] AreFileApisANSI () returned 1 [0232.157] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0232.202] CloseHandle (hObject=0x98) returned 1 [0232.202] AreFileApisANSI () returned 1 [0232.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0232.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495ce8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0232.202] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\RXiy.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\rxiy.pptx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\RXiy.pptx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\rxiy.pptx.cryptoid"), dwFlags=0x2) returned 1 [0232.203] AreFileApisANSI () returned 1 [0232.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0232.267] CloseHandle (hObject=0x98) returned 1 [0232.267] AreFileApisANSI () returned 1 [0232.267] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0232.267] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495b38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0232.267] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\TITuod1JY.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tituod1jy.pps"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\TITuod1JY.pps.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tituod1jy.pps.cryptoid"), dwFlags=0x2) returned 1 [0232.269] AreFileApisANSI () returned 1 [0232.269] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0232.275] CloseHandle (hObject=0x98) returned 1 [0232.275] AreFileApisANSI () returned 1 [0232.275] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0232.275] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495ee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0232.275] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\WUftj.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\wuftj.docx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\WUftj.docx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\wuftj.docx.cryptoid"), dwFlags=0x2) returned 1 [0232.276] AreFileApisANSI () returned 1 [0232.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0232.337] CloseHandle (hObject=0x98) returned 1 [0232.337] AreFileApisANSI () returned 1 [0232.337] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0232.337] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ccd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0232.338] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\xhg3c2g-5mtQtNjSIj5E.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\xhg3c2g-5mtqtnjsij5e.pptx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\xhg3c2g-5mtQtNjSIj5E.pptx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\xhg3c2g-5mtqtnjsij5e.pptx.cryptoid"), dwFlags=0x2) returned 1 [0232.339] AreFileApisANSI () returned 1 [0232.339] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0232.348] CloseHandle (hObject=0x98) returned 1 [0232.348] AreFileApisANSI () returned 1 [0232.348] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0232.348] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495ca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0232.348] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\XwhsPm.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\xwhspm.pptx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\XwhsPm.pptx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\xwhspm.pptx.cryptoid"), dwFlags=0x2) returned 1 [0232.349] AreFileApisANSI () returned 1 [0232.349] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0232.376] CloseHandle (hObject=0x98) returned 1 [0232.377] AreFileApisANSI () returned 1 [0232.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0232.377] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495d78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0232.377] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\y0D7tp6UNz9d0v.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\y0d7tp6unz9d0v.xlsx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\y0D7tp6UNz9d0v.xlsx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\y0d7tp6unz9d0v.xlsx.cryptoid"), dwFlags=0x2) returned 1 [0232.378] AreFileApisANSI () returned 1 [0232.378] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0232.445] CloseHandle (hObject=0x98) returned 1 [0232.445] AreFileApisANSI () returned 1 [0232.445] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0232.445] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d408, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0232.445] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\zNsxL9Oe2tRaN8bZv.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\znsxl9oe2tran8bzv.xlsx"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\zNsxL9Oe2tRaN8bZv.xlsx.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\znsxl9oe2tran8bzv.xlsx.cryptoid"), dwFlags=0x2) returned 1 [0232.447] AreFileApisANSI () returned 1 [0232.447] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0232.524] CloseHandle (hObject=0x98) returned 1 [0232.524] AreFileApisANSI () returned 1 [0232.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0232.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495d78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0232.525] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\_QLulScCpq.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\_qlulsccpq.doc"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Documents\\_QLulScCpq.doc.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\_qlulsccpq.doc.cryptoid"), dwFlags=0x2) returned 1 [0232.526] AreFileApisANSI () returned 1 [0232.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0232.527] CloseHandle (hObject=0x94) returned 1 [0232.527] AreFileApisANSI () returned 1 [0232.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0232.528] CloseHandle (hObject=0x94) returned 1 [0232.528] AreFileApisANSI () returned 1 [0232.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0232.529] CloseHandle (hObject=0x94) returned 1 [0232.529] AreFileApisANSI () returned 1 [0232.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0232.530] CloseHandle (hObject=0x94) returned 1 [0232.530] AreFileApisANSI () returned 1 [0232.530] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0232.548] CloseHandle (hObject=0x94) returned 1 [0232.548] AreFileApisANSI () returned 1 [0232.548] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0232.550] CloseHandle (hObject=0x94) returned 1 [0232.550] AreFileApisANSI () returned 1 [0232.550] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0232.551] CloseHandle (hObject=0x98) returned 1 [0232.552] AreFileApisANSI () returned 1 [0232.552] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0232.553] CloseHandle (hObject=0x98) returned 1 [0232.553] AreFileApisANSI () returned 1 [0232.553] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0232.558] CloseHandle (hObject=0x98) returned 1 [0232.558] AreFileApisANSI () returned 1 [0232.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495f70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0232.566] CloseHandle (hObject=0x94) returned 1 [0232.568] AreFileApisANSI () returned 1 [0232.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0232.570] CloseHandle (hObject=0x94) returned 1 [0232.570] AreFileApisANSI () returned 1 [0232.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495b38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0232.600] CloseHandle (hObject=0x94) returned 1 [0232.600] AreFileApisANSI () returned 1 [0232.600] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0232.607] CloseHandle (hObject=0x94) returned 1 [0232.608] AreFileApisANSI () returned 1 [0232.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0232.609] CloseHandle (hObject=0x94) returned 1 [0232.610] AreFileApisANSI () returned 1 [0232.610] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0232.611] CloseHandle (hObject=0x94) returned 1 [0232.611] AreFileApisANSI () returned 1 [0232.612] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4959d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0232.613] CloseHandle (hObject=0x94) returned 1 [0232.613] AreFileApisANSI () returned 1 [0232.613] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0232.615] CloseHandle (hObject=0x94) returned 1 [0232.615] AreFileApisANSI () returned 1 [0232.615] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495b38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0232.616] CloseHandle (hObject=0x94) returned 1 [0232.617] AreFileApisANSI () returned 1 [0232.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0232.803] CloseHandle (hObject=0x98) returned 1 [0232.803] AreFileApisANSI () returned 1 [0232.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0232.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495c10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0232.803] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\89VL1KAj- 52.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\89vl1kaj- 52.m4a"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\89VL1KAj- 52.m4a.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\89vl1kaj- 52.m4a.cryptoid"), dwFlags=0x2) returned 1 [0232.804] AreFileApisANSI () returned 1 [0232.804] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0232.808] CloseHandle (hObject=0x98) returned 1 [0232.808] AreFileApisANSI () returned 1 [0232.809] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0232.810] CloseHandle (hObject=0x98) returned 1 [0232.810] AreFileApisANSI () returned 1 [0232.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0232.811] CloseHandle (hObject=0x98) returned 1 [0232.811] AreFileApisANSI () returned 1 [0232.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0232.989] CloseHandle (hObject=0x9c) returned 1 [0232.990] AreFileApisANSI () returned 1 [0232.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0232.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495a60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0232.990] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\0Gkr89Qp.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\0gkr89qp.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\0Gkr89Qp.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\0gkr89qp.wav.cryptoid"), dwFlags=0x2) returned 1 [0232.991] AreFileApisANSI () returned 1 [0232.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0233.037] CloseHandle (hObject=0x9c) returned 1 [0233.038] AreFileApisANSI () returned 1 [0233.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0233.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0233.038] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\6WH3-eYj0Hpz5vfFbrg.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\6wh3-eyj0hpz5vffbrg.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\6WH3-eYj0Hpz5vfFbrg.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\6wh3-eyj0hpz5vffbrg.wav.cryptoid"), dwFlags=0x2) returned 1 [0233.039] AreFileApisANSI () returned 1 [0233.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0233.053] CloseHandle (hObject=0x9c) returned 1 [0233.053] AreFileApisANSI () returned 1 [0233.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0233.054] CloseHandle (hObject=0x9c) returned 1 [0233.054] AreFileApisANSI () returned 1 [0233.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0233.056] CloseHandle (hObject=0x9c) returned 1 [0233.056] AreFileApisANSI () returned 1 [0233.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0233.180] CloseHandle (hObject=0xa0) returned 1 [0233.180] AreFileApisANSI () returned 1 [0233.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0233.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d1a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0233.181] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\8Bi9\\ac5GAAceriiFFh.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\8bi9\\ac5gaaceriiffh.m4a"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\8Bi9\\ac5GAAceriiFFh.m4a.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\8bi9\\ac5gaaceriiffh.m4a.cryptoid"), dwFlags=0x2) returned 1 [0233.182] AreFileApisANSI () returned 1 [0233.182] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0233.244] CloseHandle (hObject=0xa0) returned 1 [0233.245] AreFileApisANSI () returned 1 [0233.245] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0233.245] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495988, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0233.245] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\8Bi9\\GHemi1.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\8bi9\\ghemi1.m4a"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\8Bi9\\GHemi1.m4a.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\8bi9\\ghemi1.m4a.cryptoid"), dwFlags=0x2) returned 1 [0233.246] AreFileApisANSI () returned 1 [0233.246] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0233.370] CloseHandle (hObject=0xa0) returned 1 [0233.370] AreFileApisANSI () returned 1 [0233.370] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0233.370] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ce30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0233.370] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\8Bi9\\HYdS75j00bJFFq.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\8bi9\\hyds75j00bjffq.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\8Bi9\\HYdS75j00bJFFq.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\8bi9\\hyds75j00bjffq.wav.cryptoid"), dwFlags=0x2) returned 1 [0233.371] AreFileApisANSI () returned 1 [0233.371] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0233.455] CloseHandle (hObject=0xa0) returned 1 [0233.455] AreFileApisANSI () returned 1 [0233.455] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0233.455] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495bc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0233.455] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\8Bi9\\TDdnI2.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\8bi9\\tddni2.mp3"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\8Bi9\\TDdnI2.mp3.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\8bi9\\tddni2.mp3.cryptoid"), dwFlags=0x2) returned 1 [0233.457] AreFileApisANSI () returned 1 [0233.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0233.530] CloseHandle (hObject=0xa0) returned 1 [0233.531] AreFileApisANSI () returned 1 [0233.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0233.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cd28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0233.531] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\8Bi9\\uXIWy2TuODlYcafJ.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\8bi9\\uxiwy2tuodlycafj.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\8Bi9\\uXIWy2TuODlYcafJ.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\8bi9\\uxiwy2tuodlycafj.wav.cryptoid"), dwFlags=0x2) returned 1 [0233.532] AreFileApisANSI () returned 1 [0233.532] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0233.613] CloseHandle (hObject=0xa0) returned 1 [0233.613] AreFileApisANSI () returned 1 [0233.613] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0233.613] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495f70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0233.613] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\8Bi9\\VgFQyc.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\8bi9\\vgfqyc.m4a"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\8Bi9\\VgFQyc.m4a.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\8bi9\\vgfqyc.m4a.cryptoid"), dwFlags=0x2) returned 1 [0233.614] AreFileApisANSI () returned 1 [0233.614] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0233.697] CloseHandle (hObject=0xa0) returned 1 [0233.697] AreFileApisANSI () returned 1 [0233.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0233.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d1f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0233.697] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\8Bi9\\ZSzkhVRueQPHGJQVvMIk.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\8bi9\\zszkhvrueqphgjqvvmik.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\8Bi9\\ZSzkhVRueQPHGJQVvMIk.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\8bi9\\zszkhvrueqphgjqvvmik.wav.cryptoid"), dwFlags=0x2) returned 1 [0233.698] AreFileApisANSI () returned 1 [0233.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0233.797] CloseHandle (hObject=0x9c) returned 1 [0233.798] AreFileApisANSI () returned 1 [0233.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0233.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495a60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0233.798] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\9abs3Ye.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\9abs3ye.mp3"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\9abs3Ye.mp3.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\9abs3ye.mp3.cryptoid"), dwFlags=0x2) returned 1 [0233.799] AreFileApisANSI () returned 1 [0233.799] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0233.859] CloseHandle (hObject=0x9c) returned 1 [0233.859] AreFileApisANSI () returned 1 [0233.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0233.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495d78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0233.860] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\diBynMNh8.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\dibynmnh8.m4a"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\diBynMNh8.m4a.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\dibynmnh8.m4a.cryptoid"), dwFlags=0x2) returned 1 [0233.861] AreFileApisANSI () returned 1 [0233.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0233.898] CloseHandle (hObject=0x9c) returned 1 [0233.898] AreFileApisANSI () returned 1 [0233.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0233.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495868, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0233.898] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\iJ66Gf.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\ij66gf.mp3"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\iJ66Gf.mp3.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\ij66gf.mp3.cryptoid"), dwFlags=0x2) returned 1 [0233.900] AreFileApisANSI () returned 1 [0233.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0233.962] CloseHandle (hObject=0x9c) returned 1 [0233.962] AreFileApisANSI () returned 1 [0233.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0233.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ce30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0233.963] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\K6h1iP0wd-yKEfNmS.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\k6h1ip0wd-ykefnms.m4a"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\K6h1iP0wd-yKEfNmS.m4a.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\k6h1ip0wd-ykefnms.m4a.cryptoid"), dwFlags=0x2) returned 1 [0233.964] AreFileApisANSI () returned 1 [0233.964] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0234.062] CloseHandle (hObject=0x9c) returned 1 [0234.062] AreFileApisANSI () returned 1 [0234.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0234.062] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0234.062] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\pZo8cZSHZms1bpOTd.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\pzo8czshzms1bpotd.m4a"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\FJnqxot\\pZo8cZSHZms1bpOTd.m4a.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fjnqxot\\pzo8czshzms1bpotd.m4a.cryptoid"), dwFlags=0x2) returned 1 [0234.063] AreFileApisANSI () returned 1 [0234.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0234.088] CloseHandle (hObject=0x98) returned 1 [0234.088] AreFileApisANSI () returned 1 [0234.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0234.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495ee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0234.089] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\N5PCDUe5Zv-bw.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\n5pcdue5zv-bw.m4a"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\N5PCDUe5Zv-bw.m4a.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\n5pcdue5zv-bw.m4a.cryptoid"), dwFlags=0x2) returned 1 [0234.090] AreFileApisANSI () returned 1 [0234.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0234.207] CloseHandle (hObject=0x98) returned 1 [0234.207] AreFileApisANSI () returned 1 [0234.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0234.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495af0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0234.207] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\NODD-pBkpHiHe243ob.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nodd-pbkphihe243ob.m4a"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\NODD-pBkpHiHe243ob.m4a.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nodd-pbkphihe243ob.m4a.cryptoid"), dwFlags=0x2) returned 1 [0234.208] AreFileApisANSI () returned 1 [0234.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0234.296] CloseHandle (hObject=0x98) returned 1 [0234.296] AreFileApisANSI () returned 1 [0234.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0234.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0234.296] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\OoNDD6tTh m6ZS.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\oondd6tth m6zs.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\OoNDD6tTh m6ZS.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\oondd6tth m6zs.wav.cryptoid"), dwFlags=0x2) returned 1 [0234.297] AreFileApisANSI () returned 1 [0234.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 37 [0234.358] CloseHandle (hObject=0x98) returned 1 [0234.359] AreFileApisANSI () returned 1 [0234.359] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 37 [0234.359] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0234.359] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\P01.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\p01.m4a"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\P01.m4a.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\p01.m4a.cryptoid"), dwFlags=0x2) returned 1 [0234.360] AreFileApisANSI () returned 1 [0234.360] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0234.430] CloseHandle (hObject=0x98) returned 1 [0234.431] AreFileApisANSI () returned 1 [0234.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0234.431] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4958b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0234.431] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\RcceaJZS55h0DA_a-.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\rcceajzs55h0da_a-.mp3"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\RcceaJZS55h0DA_a-.mp3.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\rcceajzs55h0da_a-.mp3.cryptoid"), dwFlags=0x2) returned 1 [0234.432] AreFileApisANSI () returned 1 [0234.432] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0234.464] CloseHandle (hObject=0x98) returned 1 [0234.464] AreFileApisANSI () returned 1 [0234.464] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0234.464] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495ee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0234.464] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\sfSsOBUiT6vpb_wOEfGV.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\sfssobuit6vpb_woefgv.mp3"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\sfSsOBUiT6vpb_wOEfGV.mp3.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\sfssobuit6vpb_woefgv.mp3.cryptoid"), dwFlags=0x2) returned 1 [0234.465] AreFileApisANSI () returned 1 [0234.465] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0234.489] CloseHandle (hObject=0x98) returned 1 [0234.489] AreFileApisANSI () returned 1 [0234.489] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0234.489] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495a60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0234.489] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\T9VYCI21QP.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\t9vyci21qp.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\T9VYCI21QP.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\t9vyci21qp.wav.cryptoid"), dwFlags=0x2) returned 1 [0234.490] AreFileApisANSI () returned 1 [0234.490] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0234.552] CloseHandle (hObject=0x98) returned 1 [0234.552] AreFileApisANSI () returned 1 [0234.552] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0234.552] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495ce8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0234.552] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\VX-sAlCZeVje.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\vx-salczevje.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\VX-sAlCZeVje.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\vx-salczevje.wav.cryptoid"), dwFlags=0x2) returned 1 [0234.553] AreFileApisANSI () returned 1 [0234.553] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 40 [0234.563] CloseHandle (hObject=0x98) returned 1 [0234.563] AreFileApisANSI () returned 1 [0234.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 40 [0234.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4958f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0234.564] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\XfuR32.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\xfur32.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\XfuR32.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\xfur32.wav.cryptoid"), dwFlags=0x2) returned 1 [0234.565] AreFileApisANSI () returned 1 [0234.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0234.588] CloseHandle (hObject=0x98) returned 1 [0234.588] AreFileApisANSI () returned 1 [0234.589] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0234.589] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495d30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0234.589] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\xpYxAoMXFt.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\xpyxaomxft.wav"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Music\\xpYxAoMXFt.wav.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\xpyxaomxft.wav.cryptoid"), dwFlags=0x2) returned 1 [0234.590] AreFileApisANSI () returned 1 [0234.590] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0234.591] CloseHandle (hObject=0x94) returned 1 [0234.591] AreFileApisANSI () returned 1 [0234.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0234.593] CloseHandle (hObject=0x94) returned 1 [0234.593] AreFileApisANSI () returned 1 [0234.593] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0234.594] CloseHandle (hObject=0x94) returned 1 [0234.595] AreFileApisANSI () returned 1 [0234.595] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495e50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0234.598] CloseHandle (hObject=0x94) returned 1 [0234.599] AreFileApisANSI () returned 1 [0234.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495b38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0234.603] CloseHandle (hObject=0x94) returned 1 [0234.609] AreFileApisANSI () returned 1 [0234.609] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495b38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0234.611] CloseHandle (hObject=0x94) returned 1 [0234.612] AreFileApisANSI () returned 1 [0234.612] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0234.613] CloseHandle (hObject=0x94) returned 1 [0234.613] AreFileApisANSI () returned 1 [0234.613] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0234.614] CloseHandle (hObject=0x94) returned 1 [0234.614] AreFileApisANSI () returned 1 [0234.614] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0234.624] CloseHandle (hObject=0x94) returned 1 [0234.624] AreFileApisANSI () returned 1 [0234.624] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0234.625] CloseHandle (hObject=0x94) returned 1 [0234.625] AreFileApisANSI () returned 1 [0234.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0234.627] CloseHandle (hObject=0x94) returned 1 [0234.627] AreFileApisANSI () returned 1 [0234.627] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0234.628] CloseHandle (hObject=0x94) returned 1 [0234.628] AreFileApisANSI () returned 1 [0234.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0234.632] CloseHandle (hObject=0x98) returned 1 [0234.632] AreFileApisANSI () returned 1 [0234.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0234.633] CloseHandle (hObject=0x98) returned 1 [0234.633] AreFileApisANSI () returned 1 [0234.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0234.634] CloseHandle (hObject=0x98) returned 1 [0234.634] AreFileApisANSI () returned 1 [0234.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0234.642] CloseHandle (hObject=0x9c) returned 1 [0234.643] AreFileApisANSI () returned 1 [0234.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0234.644] CloseHandle (hObject=0x9c) returned 1 [0234.644] AreFileApisANSI () returned 1 [0234.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0234.647] CloseHandle (hObject=0x9c) returned 1 [0234.647] AreFileApisANSI () returned 1 [0234.647] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4989a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0234.655] CloseHandle (hObject=0x9c) returned 1 [0234.655] AreFileApisANSI () returned 1 [0234.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498028, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0234.656] CloseHandle (hObject=0x9c) returned 1 [0234.656] AreFileApisANSI () returned 1 [0234.656] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497d28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0234.659] CloseHandle (hObject=0x9c) returned 1 [0234.659] AreFileApisANSI () returned 1 [0234.659] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0234.662] CloseHandle (hObject=0x9c) returned 1 [0234.662] AreFileApisANSI () returned 1 [0234.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0234.663] CloseHandle (hObject=0x9c) returned 1 [0234.663] AreFileApisANSI () returned 1 [0234.663] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0234.664] CloseHandle (hObject=0x9c) returned 1 [0234.664] AreFileApisANSI () returned 1 [0234.664] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0234.704] CloseHandle (hObject=0xa0) returned 1 [0234.704] AreFileApisANSI () returned 1 [0234.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0234.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0234.704] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\gB5MeEpS\\4hAgxYdA21.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\gb5meeps\\4hagxyda21.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\gB5MeEpS\\4hAgxYdA21.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\gb5meeps\\4hagxyda21.jpg.cryptoid"), dwFlags=0x2) returned 1 [0234.705] AreFileApisANSI () returned 1 [0234.705] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0234.750] CloseHandle (hObject=0xa0) returned 1 [0234.750] AreFileApisANSI () returned 1 [0234.750] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0234.750] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0234.750] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\gB5MeEpS\\E1pNts-PAT12vu1oQww.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\gb5meeps\\e1pnts-pat12vu1oqww.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\gB5MeEpS\\E1pNts-PAT12vu1oQww.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\gb5meeps\\e1pnts-pat12vu1oqww.jpg.cryptoid"), dwFlags=0x2) returned 1 [0234.751] AreFileApisANSI () returned 1 [0234.751] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0234.820] CloseHandle (hObject=0xa0) returned 1 [0234.821] AreFileApisANSI () returned 1 [0234.821] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0234.821] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cdd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0234.821] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\gB5MeEpS\\fErPB.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\gb5meeps\\ferpb.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\gB5MeEpS\\fErPB.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\gb5meeps\\ferpb.jpg.cryptoid"), dwFlags=0x2) returned 1 [0234.822] AreFileApisANSI () returned 1 [0234.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0234.908] CloseHandle (hObject=0xa0) returned 1 [0234.908] AreFileApisANSI () returned 1 [0234.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0234.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0234.908] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\gB5MeEpS\\QcbIuB4w5H7vIW7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\gb5meeps\\qcbiub4w5h7viw7.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\gB5MeEpS\\QcbIuB4w5H7vIW7.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\gb5meeps\\qcbiub4w5h7viw7.jpg.cryptoid"), dwFlags=0x2) returned 1 [0234.909] AreFileApisANSI () returned 1 [0234.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0235.000] CloseHandle (hObject=0x9c) returned 1 [0235.001] AreFileApisANSI () returned 1 [0235.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0235.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d300, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0235.001] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\iSVX6fmN.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\isvx6fmn.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\iSVX6fmN.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\isvx6fmn.gif.cryptoid"), dwFlags=0x2) returned 1 [0235.002] AreFileApisANSI () returned 1 [0235.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0235.118] CloseHandle (hObject=0x9c) returned 1 [0235.118] AreFileApisANSI () returned 1 [0235.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0235.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d300, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0235.118] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\jqTk5HyUOuI-EY.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\jqtk5hyuoui-ey.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\jqTk5HyUOuI-EY.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\jqtk5hyuoui-ey.png.cryptoid"), dwFlags=0x2) returned 1 [0235.120] AreFileApisANSI () returned 1 [0235.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0235.224] CloseHandle (hObject=0x9c) returned 1 [0235.224] AreFileApisANSI () returned 1 [0235.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0235.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cfe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0235.224] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\jvz9PPG.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\jvz9ppg.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\jvz9PPG.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\jvz9ppg.jpg.cryptoid"), dwFlags=0x2) returned 1 [0235.225] AreFileApisANSI () returned 1 [0235.225] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0235.280] CloseHandle (hObject=0x9c) returned 1 [0235.281] AreFileApisANSI () returned 1 [0235.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0235.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0235.281] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\Nba_Eddq.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\nba_eddq.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\Nba_Eddq.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\nba_eddq.gif.cryptoid"), dwFlags=0x2) returned 1 [0235.282] AreFileApisANSI () returned 1 [0235.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0235.285] CloseHandle (hObject=0x9c) returned 1 [0235.285] AreFileApisANSI () returned 1 [0235.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0235.306] CloseHandle (hObject=0x9c) returned 1 [0235.306] AreFileApisANSI () returned 1 [0235.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0235.307] CloseHandle (hObject=0x9c) returned 1 [0235.307] AreFileApisANSI () returned 1 [0235.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0235.326] CloseHandle (hObject=0xa0) returned 1 [0235.326] AreFileApisANSI () returned 1 [0235.326] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0235.326] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0235.326] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\QS_YfCN\\DPdAa8fqcbqk.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\qs_yfcn\\dpdaa8fqcbqk.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\QS_YfCN\\DPdAa8fqcbqk.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\qs_yfcn\\dpdaa8fqcbqk.png.cryptoid"), dwFlags=0x2) returned 1 [0235.327] AreFileApisANSI () returned 1 [0235.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0235.417] CloseHandle (hObject=0xa0) returned 1 [0235.417] AreFileApisANSI () returned 1 [0235.417] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0235.417] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cfe8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0235.417] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\QS_YfCN\\UDFv.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\qs_yfcn\\udfv.bmp"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\QS_YfCN\\UDFv.bmp.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\qs_yfcn\\udfv.bmp.cryptoid"), dwFlags=0x2) returned 1 [0235.418] AreFileApisANSI () returned 1 [0235.418] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4983a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0235.422] CloseHandle (hObject=0x9c) returned 1 [0235.422] AreFileApisANSI () returned 1 [0235.422] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498228, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0235.423] CloseHandle (hObject=0x9c) returned 1 [0235.423] AreFileApisANSI () returned 1 [0235.423] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0235.424] CloseHandle (hObject=0x9c) returned 1 [0235.424] AreFileApisANSI () returned 1 [0235.424] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0235.489] CloseHandle (hObject=0xa0) returned 1 [0235.489] AreFileApisANSI () returned 1 [0235.489] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0235.489] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493858, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0235.489] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\xeA0 ZB1FfmAyobM1iD\\BpyP6Z5XzBx4l1k.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\xea0 zb1ffmayobm1id\\bpyp6z5xzbx4l1k.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\xeA0 ZB1FfmAyobM1iD\\BpyP6Z5XzBx4l1k.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\xea0 zb1ffmayobm1id\\bpyp6z5xzbx4l1k.png.cryptoid"), dwFlags=0x2) returned 1 [0235.490] AreFileApisANSI () returned 1 [0235.490] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0235.494] CloseHandle (hObject=0xa0) returned 1 [0235.494] AreFileApisANSI () returned 1 [0235.494] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0235.494] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493b28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0235.494] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\xeA0 ZB1FfmAyobM1iD\\RV7TY_0TxCTg2.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\xea0 zb1ffmayobm1id\\rv7ty_0txctg2.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\xeA0 ZB1FfmAyobM1iD\\RV7TY_0TxCTg2.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\xea0 zb1ffmayobm1id\\rv7ty_0txctg2.png.cryptoid"), dwFlags=0x2) returned 1 [0235.495] AreFileApisANSI () returned 1 [0235.495] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0235.560] CloseHandle (hObject=0xa0) returned 1 [0235.560] AreFileApisANSI () returned 1 [0235.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0235.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493ab0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0235.560] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\xeA0 ZB1FfmAyobM1iD\\yjGllTRTdS6CBWa.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\xea0 zb1ffmayobm1id\\yjglltrtds6cbwa.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\xeA0 ZB1FfmAyobM1iD\\yjGllTRTdS6CBWa.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\xea0 zb1ffmayobm1id\\yjglltrtds6cbwa.png.cryptoid"), dwFlags=0x2) returned 1 [0235.561] AreFileApisANSI () returned 1 [0235.561] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0235.564] CloseHandle (hObject=0x9c) returned 1 [0235.564] AreFileApisANSI () returned 1 [0235.564] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4976f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0235.565] CloseHandle (hObject=0x9c) returned 1 [0235.565] AreFileApisANSI () returned 1 [0235.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0235.566] CloseHandle (hObject=0x9c) returned 1 [0235.566] AreFileApisANSI () returned 1 [0235.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0235.657] CloseHandle (hObject=0xa0) returned 1 [0235.657] AreFileApisANSI () returned 1 [0235.657] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0235.657] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0235.657] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\yEOC_U\\C4SJhqi dY.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\yeoc_u\\c4sjhqi dy.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\yEOC_U\\C4SJhqi dY.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\yeoc_u\\c4sjhqi dy.png.cryptoid"), dwFlags=0x2) returned 1 [0235.658] AreFileApisANSI () returned 1 [0235.658] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0235.731] CloseHandle (hObject=0xa0) returned 1 [0235.731] AreFileApisANSI () returned 1 [0235.731] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0235.731] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0235.731] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\yEOC_U\\pBFzMupY3EC.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\yeoc_u\\pbfzmupy3ec.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\yEOC_U\\pBFzMupY3EC.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\yeoc_u\\pbfzmupy3ec.png.cryptoid"), dwFlags=0x2) returned 1 [0235.732] AreFileApisANSI () returned 1 [0235.732] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0235.757] CloseHandle (hObject=0xa0) returned 1 [0235.757] AreFileApisANSI () returned 1 [0235.757] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0235.757] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0235.757] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\yEOC_U\\SLLaPcvdlVrXhU 640.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\yeoc_u\\sllapcvdlvrxhu 640.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\yEOC_U\\SLLaPcvdlVrXhU 640.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\yeoc_u\\sllapcvdlvrxhu 640.png.cryptoid"), dwFlags=0x2) returned 1 [0235.758] AreFileApisANSI () returned 1 [0235.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0235.844] CloseHandle (hObject=0x9c) returned 1 [0235.844] AreFileApisANSI () returned 1 [0235.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0235.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d300, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0235.844] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\Y_jl5Pf6LFR.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\y_jl5pf6lfr.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\6AKn2O7sH I1i5UwG\\Y_jl5Pf6LFR.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\6akn2o7sh i1i5uwg\\y_jl5pf6lfr.jpg.cryptoid"), dwFlags=0x2) returned 1 [0235.845] AreFileApisANSI () returned 1 [0235.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d300, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0235.846] CloseHandle (hObject=0x98) returned 1 [0235.846] AreFileApisANSI () returned 1 [0235.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0235.885] CloseHandle (hObject=0x98) returned 1 [0235.885] AreFileApisANSI () returned 1 [0235.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d1f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0235.886] CloseHandle (hObject=0x98) returned 1 [0235.886] AreFileApisANSI () returned 1 [0235.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0235.887] CloseHandle (hObject=0x98) returned 1 [0235.887] AreFileApisANSI () returned 1 [0235.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0235.904] CloseHandle (hObject=0x98) returned 1 [0235.904] AreFileApisANSI () returned 1 [0235.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0235.905] CloseHandle (hObject=0x98) returned 1 [0235.905] AreFileApisANSI () returned 1 [0235.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0235.957] CloseHandle (hObject=0x9c) returned 1 [0235.957] AreFileApisANSI () returned 1 [0235.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0235.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0235.957] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\g8ttuB0msS3IOZXN-\\9bYLjgj cwTkHcadeXA.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\g8ttub0mss3iozxn-\\9byljgj cwtkhcadexa.bmp"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\g8ttuB0msS3IOZXN-\\9bYLjgj cwTkHcadeXA.bmp.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\g8ttub0mss3iozxn-\\9byljgj cwtkhcadexa.bmp.cryptoid"), dwFlags=0x2) returned 1 [0235.959] AreFileApisANSI () returned 1 [0235.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0236.014] CloseHandle (hObject=0x98) returned 1 [0236.014] AreFileApisANSI () returned 1 [0236.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0236.014] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0236.014] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\IEHHdswUEFhk.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\iehhdswuefhk.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\IEHHdswUEFhk.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\iehhdswuefhk.jpg.cryptoid"), dwFlags=0x2) returned 1 [0236.015] AreFileApisANSI () returned 1 [0236.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d300, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0236.017] CloseHandle (hObject=0x98) returned 1 [0236.017] AreFileApisANSI () returned 1 [0236.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cdd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0236.021] CloseHandle (hObject=0x98) returned 1 [0236.021] AreFileApisANSI () returned 1 [0236.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d0f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0236.022] CloseHandle (hObject=0x98) returned 1 [0236.022] AreFileApisANSI () returned 1 [0236.022] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0236.026] CloseHandle (hObject=0x98) returned 1 [0236.026] AreFileApisANSI () returned 1 [0236.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0236.027] CloseHandle (hObject=0x98) returned 1 [0236.027] AreFileApisANSI () returned 1 [0236.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d0f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0236.028] CloseHandle (hObject=0x98) returned 1 [0236.028] AreFileApisANSI () returned 1 [0236.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0236.054] CloseHandle (hObject=0x9c) returned 1 [0236.054] AreFileApisANSI () returned 1 [0236.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0236.054] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d040, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0236.054] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\Whs5FbKuL0X94\\rA6a7C.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\whs5fbkul0x94\\ra6a7c.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\Whs5FbKuL0X94\\rA6a7C.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\whs5fbkul0x94\\ra6a7c.jpg.cryptoid"), dwFlags=0x2) returned 1 [0236.060] AreFileApisANSI () returned 1 [0236.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0236.063] CloseHandle (hObject=0x9c) returned 1 [0236.063] AreFileApisANSI () returned 1 [0236.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0236.064] CloseHandle (hObject=0x9c) returned 1 [0236.064] AreFileApisANSI () returned 1 [0236.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0236.065] CloseHandle (hObject=0x9c) returned 1 [0236.065] AreFileApisANSI () returned 1 [0236.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0236.082] CloseHandle (hObject=0xa0) returned 1 [0236.082] AreFileApisANSI () returned 1 [0236.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0236.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0236.082] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\Whs5FbKuL0X94\\uFxtytL3h\\BX1EQvKxXZb-I9ED.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\whs5fbkul0x94\\ufxtytl3h\\bx1eqvkxxzb-i9ed.gif"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\Whs5FbKuL0X94\\uFxtytL3h\\BX1EQvKxXZb-I9ED.gif.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\whs5fbkul0x94\\ufxtytl3h\\bx1eqvkxxzb-i9ed.gif.cryptoid"), dwFlags=0x2) returned 1 [0236.083] AreFileApisANSI () returned 1 [0236.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0236.173] CloseHandle (hObject=0xa0) returned 1 [0236.173] AreFileApisANSI () returned 1 [0236.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0236.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d358, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0236.173] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\Whs5FbKuL0X94\\uFxtytL3h\\Iv_YCS59n.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\whs5fbkul0x94\\ufxtytl3h\\iv_ycs59n.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\Whs5FbKuL0X94\\uFxtytL3h\\Iv_YCS59n.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\whs5fbkul0x94\\ufxtytl3h\\iv_ycs59n.png.cryptoid"), dwFlags=0x2) returned 1 [0236.174] AreFileApisANSI () returned 1 [0236.174] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0236.226] CloseHandle (hObject=0xa0) returned 1 [0236.226] AreFileApisANSI () returned 1 [0236.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0236.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d1f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0236.226] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\Whs5FbKuL0X94\\uFxtytL3h\\ldLR_.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\whs5fbkul0x94\\ufxtytl3h\\ldlr_.bmp"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\Whs5FbKuL0X94\\uFxtytL3h\\ldLR_.bmp.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\whs5fbkul0x94\\ufxtytl3h\\ldlr_.bmp.cryptoid"), dwFlags=0x2) returned 1 [0236.228] AreFileApisANSI () returned 1 [0236.228] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0236.281] CloseHandle (hObject=0xa0) returned 1 [0236.281] AreFileApisANSI () returned 1 [0236.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0236.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0236.281] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\Whs5FbKuL0X94\\uFxtytL3h\\O5qc.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\whs5fbkul0x94\\ufxtytl3h\\o5qc.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\Whs5FbKuL0X94\\uFxtytL3h\\O5qc.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\whs5fbkul0x94\\ufxtytl3h\\o5qc.png.cryptoid"), dwFlags=0x2) returned 1 [0236.282] AreFileApisANSI () returned 1 [0236.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0236.391] CloseHandle (hObject=0xa0) returned 1 [0236.392] AreFileApisANSI () returned 1 [0236.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0236.392] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0236.392] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\Whs5FbKuL0X94\\uFxtytL3h\\tY03yqutqoKkJDMn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\whs5fbkul0x94\\ufxtytl3h\\ty03yqutqokkjdmn.png"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\Whs5FbKuL0X94\\uFxtytL3h\\tY03yqutqoKkJDMn.png.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\whs5fbkul0x94\\ufxtytl3h\\ty03yqutqokkjdmn.png.cryptoid"), dwFlags=0x2) returned 1 [0236.393] AreFileApisANSI () returned 1 [0236.393] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0236.690] CloseHandle (hObject=0x9c) returned 1 [0236.690] AreFileApisANSI () returned 1 [0236.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0236.691] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ce88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0236.691] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\Whs5FbKuL0X94\\wWoVdmzqQ7A.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\whs5fbkul0x94\\wwovdmzqq7a.jpg"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Pictures\\Whs5FbKuL0X94\\wWoVdmzqQ7A.jpg.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\whs5fbkul0x94\\wwovdmzqq7a.jpg.cryptoid"), dwFlags=0x2) returned 1 [0236.692] AreFileApisANSI () returned 1 [0236.692] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0236.695] CloseHandle (hObject=0x94) returned 1 [0236.702] AreFileApisANSI () returned 1 [0236.702] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0236.710] CloseHandle (hObject=0x94) returned 1 [0236.711] AreFileApisANSI () returned 1 [0236.711] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0236.713] CloseHandle (hObject=0x94) returned 1 [0236.715] AreFileApisANSI () returned 1 [0236.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495b80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0236.716] CloseHandle (hObject=0x94) returned 1 [0236.716] AreFileApisANSI () returned 1 [0236.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0236.718] CloseHandle (hObject=0x94) returned 1 [0236.718] AreFileApisANSI () returned 1 [0236.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495b38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0236.720] CloseHandle (hObject=0x94) returned 1 [0236.721] AreFileApisANSI () returned 1 [0236.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0236.722] CloseHandle (hObject=0x94) returned 1 [0236.722] AreFileApisANSI () returned 1 [0236.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0236.725] CloseHandle (hObject=0x94) returned 1 [0236.725] AreFileApisANSI () returned 1 [0236.725] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0236.726] CloseHandle (hObject=0x94) returned 1 [0236.726] AreFileApisANSI () returned 1 [0236.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0236.731] CloseHandle (hObject=0x94) returned 1 [0236.731] AreFileApisANSI () returned 1 [0236.732] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0236.732] CloseHandle (hObject=0x94) returned 1 [0236.733] AreFileApisANSI () returned 1 [0236.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0236.734] CloseHandle (hObject=0x94) returned 1 [0236.734] AreFileApisANSI () returned 1 [0236.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495b38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0236.735] CloseHandle (hObject=0x94) returned 1 [0236.735] AreFileApisANSI () returned 1 [0236.736] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f650, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0236.737] CloseHandle (hObject=0x94) returned 1 [0236.737] AreFileApisANSI () returned 1 [0236.737] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495868, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0236.739] CloseHandle (hObject=0x94) returned 1 [0236.739] AreFileApisANSI () returned 1 [0236.739] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0236.741] CloseHandle (hObject=0x94) returned 1 [0236.745] AreFileApisANSI () returned 1 [0236.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0236.748] CloseHandle (hObject=0x94) returned 1 [0236.750] AreFileApisANSI () returned 1 [0236.750] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0236.753] CloseHandle (hObject=0x94) returned 1 [0236.753] AreFileApisANSI () returned 1 [0236.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0236.755] CloseHandle (hObject=0x94) returned 1 [0236.755] AreFileApisANSI () returned 1 [0236.755] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0236.756] CloseHandle (hObject=0x94) returned 1 [0236.756] AreFileApisANSI () returned 1 [0236.756] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0236.758] CloseHandle (hObject=0x94) returned 1 [0236.758] AreFileApisANSI () returned 1 [0236.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495b80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0236.759] CloseHandle (hObject=0x94) returned 1 [0236.760] AreFileApisANSI () returned 1 [0236.760] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f650, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0236.761] CloseHandle (hObject=0x94) returned 1 [0236.761] AreFileApisANSI () returned 1 [0236.761] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0236.763] CloseHandle (hObject=0x94) returned 1 [0236.763] AreFileApisANSI () returned 1 [0236.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d1a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0236.783] CloseHandle (hObject=0x98) returned 1 [0236.783] AreFileApisANSI () returned 1 [0236.783] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0236.784] CloseHandle (hObject=0x98) returned 1 [0236.784] AreFileApisANSI () returned 1 [0236.784] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cd28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0236.787] CloseHandle (hObject=0x98) returned 1 [0236.787] AreFileApisANSI () returned 1 [0236.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0237.159] CloseHandle (hObject=0x9c) returned 1 [0237.159] AreFileApisANSI () returned 1 [0237.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0237.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495868, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0237.159] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\jVcl9q.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\jvcl9q.mkv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\jVcl9q.mkv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\jvcl9q.mkv.cryptoid"), dwFlags=0x2) returned 1 [0237.160] AreFileApisANSI () returned 1 [0237.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0237.208] CloseHandle (hObject=0x9c) returned 1 [0237.208] AreFileApisANSI () returned 1 [0237.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0237.209] CloseHandle (hObject=0x9c) returned 1 [0237.209] AreFileApisANSI () returned 1 [0237.209] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0237.210] CloseHandle (hObject=0x9c) returned 1 [0237.210] AreFileApisANSI () returned 1 [0237.210] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0237.472] CloseHandle (hObject=0xa0) returned 1 [0237.473] AreFileApisANSI () returned 1 [0237.473] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0237.473] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0237.473] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\MIw7RPefjE\\5m_4plWDN.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\miw7rpefje\\5m_4plwdn.flv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\MIw7RPefjE\\5m_4plWDN.flv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\miw7rpefje\\5m_4plwdn.flv.cryptoid"), dwFlags=0x2) returned 1 [0237.474] AreFileApisANSI () returned 1 [0237.474] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0237.551] CloseHandle (hObject=0xa0) returned 1 [0237.552] AreFileApisANSI () returned 1 [0237.552] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0237.552] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d300, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0237.552] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\MIw7RPefjE\\e-CXnqIR.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\miw7rpefje\\e-cxnqir.flv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\MIw7RPefjE\\e-CXnqIR.flv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\miw7rpefje\\e-cxnqir.flv.cryptoid"), dwFlags=0x2) returned 1 [0237.553] AreFileApisANSI () returned 1 [0237.553] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0237.643] CloseHandle (hObject=0xa0) returned 1 [0237.643] AreFileApisANSI () returned 1 [0237.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0237.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0237.643] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\MIw7RPefjE\\lkf7k_gz-V.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\miw7rpefje\\lkf7k_gz-v.mkv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\MIw7RPefjE\\lkf7k_gz-V.mkv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\miw7rpefje\\lkf7k_gz-v.mkv.cryptoid"), dwFlags=0x2) returned 1 [0237.644] AreFileApisANSI () returned 1 [0237.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498a28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0237.647] CloseHandle (hObject=0x9c) returned 1 [0237.648] AreFileApisANSI () returned 1 [0237.648] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0237.648] CloseHandle (hObject=0x9c) returned 1 [0237.649] AreFileApisANSI () returned 1 [0237.649] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0237.649] CloseHandle (hObject=0x9c) returned 1 [0237.687] AreFileApisANSI () returned 1 [0237.687] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0237.693] CloseHandle (hObject=0xa0) returned 1 [0237.693] AreFileApisANSI () returned 1 [0237.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0237.694] CloseHandle (hObject=0xa0) returned 1 [0237.694] AreFileApisANSI () returned 1 [0237.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f6b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0237.695] CloseHandle (hObject=0xa0) returned 1 [0237.695] AreFileApisANSI () returned 1 [0237.695] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0238.429] CloseHandle (hObject=0xa4) returned 1 [0238.429] AreFileApisANSI () returned 1 [0238.429] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0238.429] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493b28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0238.429] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\1M4DuVgqkqOlJvUvMB\\1Y-mJS3.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\1m4duvgqkqoljvuvmb\\1y-mjs3.mkv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\1M4DuVgqkqOlJvUvMB\\1Y-mJS3.mkv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\1m4duvgqkqoljvuvmb\\1y-mjs3.mkv.cryptoid"), dwFlags=0x2) returned 1 [0238.430] AreFileApisANSI () returned 1 [0238.430] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0238.557] CloseHandle (hObject=0xa4) returned 1 [0238.557] AreFileApisANSI () returned 1 [0238.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0238.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493ab0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0238.557] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\1M4DuVgqkqOlJvUvMB\\kNPDyRUGaKf mX.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\1m4duvgqkqoljvuvmb\\knpdyrugakf mx.flv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\1M4DuVgqkqOlJvUvMB\\kNPDyRUGaKf mX.flv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\1m4duvgqkqoljvuvmb\\knpdyrugakf mx.flv.cryptoid"), dwFlags=0x2) returned 1 [0238.559] AreFileApisANSI () returned 1 [0238.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0238.627] CloseHandle (hObject=0xa4) returned 1 [0238.628] AreFileApisANSI () returned 1 [0238.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0238.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493b28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0238.628] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\1M4DuVgqkqOlJvUvMB\\TALD.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\1m4duvgqkqoljvuvmb\\tald.mkv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\1M4DuVgqkqOlJvUvMB\\TALD.mkv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\1m4duvgqkqoljvuvmb\\tald.mkv.cryptoid"), dwFlags=0x2) returned 1 [0238.629] AreFileApisANSI () returned 1 [0238.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0238.632] CloseHandle (hObject=0xa0) returned 1 [0238.632] AreFileApisANSI () returned 1 [0238.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0238.633] CloseHandle (hObject=0xa0) returned 1 [0238.634] AreFileApisANSI () returned 1 [0238.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0238.634] CloseHandle (hObject=0xa0) returned 1 [0238.635] AreFileApisANSI () returned 1 [0238.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0238.640] CloseHandle (hObject=0xa4) returned 1 [0238.641] AreFileApisANSI () returned 1 [0238.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0238.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493e70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0238.641] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\2Jvvrn20N6BoAE\\7Zyn8cBcRfZXPU8V.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\2jvvrn20n6boae\\7zyn8cbcrfzxpu8v.flv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\2Jvvrn20N6BoAE\\7Zyn8cBcRfZXPU8V.flv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\2jvvrn20n6boae\\7zyn8cbcrfzxpu8v.flv.cryptoid"), dwFlags=0x2) returned 1 [0238.642] AreFileApisANSI () returned 1 [0238.642] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0238.644] CloseHandle (hObject=0xa4) returned 1 [0238.644] AreFileApisANSI () returned 1 [0238.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a03c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0238.645] CloseHandle (hObject=0xa4) returned 1 [0238.645] AreFileApisANSI () returned 1 [0238.645] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0238.646] CloseHandle (hObject=0xa4) returned 1 [0238.646] AreFileApisANSI () returned 1 [0238.646] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0238.661] CloseHandle (hObject=0xa8) returned 1 [0238.661] AreFileApisANSI () returned 1 [0238.661] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0238.661] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4939c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 108 [0238.662] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\2Jvvrn20N6BoAE\\9Ziq\\IQki2jxahL.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\2jvvrn20n6boae\\9ziq\\iqki2jxahl.avi"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\2Jvvrn20N6BoAE\\9Ziq\\IQki2jxahL.avi.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\2jvvrn20n6boae\\9ziq\\iqki2jxahl.avi.cryptoid"), dwFlags=0x2) returned 1 [0238.662] AreFileApisANSI () returned 1 [0238.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0238.741] CloseHandle (hObject=0xa8) returned 1 [0238.741] AreFileApisANSI () returned 1 [0238.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0238.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493ee8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0238.741] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\2Jvvrn20N6BoAE\\9Ziq\\j1sra.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\2jvvrn20n6boae\\9ziq\\j1sra.flv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\2Jvvrn20N6BoAE\\9Ziq\\j1sra.flv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\2jvvrn20n6boae\\9ziq\\j1sra.flv.cryptoid"), dwFlags=0x2) returned 1 [0238.742] AreFileApisANSI () returned 1 [0238.742] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0238.758] CloseHandle (hObject=0xa8) returned 1 [0238.759] AreFileApisANSI () returned 1 [0238.759] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3db2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0238.759] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a3138, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0238.759] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\2Jvvrn20N6BoAE\\9Ziq\\j2sN-lQXWoU07URN1.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\2jvvrn20n6boae\\9ziq\\j2sn-lqxwou07urn1.mkv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\2Jvvrn20N6BoAE\\9Ziq\\j2sN-lQXWoU07URN1.mkv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\2jvvrn20n6boae\\9ziq\\j2sn-lqxwou07urn1.mkv.cryptoid"), dwFlags=0x2) returned 1 [0238.760] AreFileApisANSI () returned 1 [0238.760] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0238.797] CloseHandle (hObject=0xa4) returned 1 [0238.797] AreFileApisANSI () returned 1 [0238.797] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0238.797] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493c90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0238.798] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\2Jvvrn20N6BoAE\\LxfqO11Hi.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\2jvvrn20n6boae\\lxfqo11hi.mp4"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\2Jvvrn20N6BoAE\\LxfqO11Hi.mp4.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\2jvvrn20n6boae\\lxfqo11hi.mp4.cryptoid"), dwFlags=0x2) returned 1 [0238.799] AreFileApisANSI () returned 1 [0238.799] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0238.903] CloseHandle (hObject=0xa4) returned 1 [0238.903] AreFileApisANSI () returned 1 [0238.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0238.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493df8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0238.903] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\2Jvvrn20N6BoAE\\O44pFB.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\2jvvrn20n6boae\\o44pfb.mkv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\2Jvvrn20N6BoAE\\O44pFB.mkv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\2jvvrn20n6boae\\o44pfb.mkv.cryptoid"), dwFlags=0x2) returned 1 [0238.904] AreFileApisANSI () returned 1 [0238.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0238.997] CloseHandle (hObject=0xa4) returned 1 [0238.997] AreFileApisANSI () returned 1 [0238.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0238.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493a38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0238.998] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\2Jvvrn20N6BoAE\\P6wRqqRJK4ITrok9.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\2jvvrn20n6boae\\p6wrqqrjk4itrok9.flv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\2Jvvrn20N6BoAE\\P6wRqqRJK4ITrok9.flv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\2jvvrn20n6boae\\p6wrqqrjk4itrok9.flv.cryptoid"), dwFlags=0x2) returned 1 [0238.999] AreFileApisANSI () returned 1 [0238.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0239.033] CloseHandle (hObject=0xa0) returned 1 [0239.033] AreFileApisANSI () returned 1 [0239.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0239.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0239.033] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\7RYVN sksMj6Lok19.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\7ryvn sksmj6lok19.swf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\7RYVN sksMj6Lok19.swf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\7ryvn sksmj6lok19.swf.cryptoid"), dwFlags=0x2) returned 1 [0239.034] AreFileApisANSI () returned 1 [0239.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0239.083] CloseHandle (hObject=0xa0) returned 1 [0239.083] AreFileApisANSI () returned 1 [0239.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0239.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0239.083] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\fN8jq.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\fn8jq.mp4"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\fN8jq.mp4.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\fn8jq.mp4.cryptoid"), dwFlags=0x2) returned 1 [0239.085] AreFileApisANSI () returned 1 [0239.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0239.149] CloseHandle (hObject=0xa0) returned 1 [0239.149] AreFileApisANSI () returned 1 [0239.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dc580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0239.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0239.150] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\pTeyK.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\pteyk.flv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\pTeyK.flv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\pteyk.flv.cryptoid"), dwFlags=0x2) returned 1 [0239.151] AreFileApisANSI () returned 1 [0239.151] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ca8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0239.157] CloseHandle (hObject=0xa0) returned 1 [0239.157] AreFileApisANSI () returned 1 [0239.157] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0239.158] CloseHandle (hObject=0xa0) returned 1 [0239.158] AreFileApisANSI () returned 1 [0239.158] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4985a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0239.159] CloseHandle (hObject=0xa0) returned 1 [0239.159] AreFileApisANSI () returned 1 [0239.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0239.172] CloseHandle (hObject=0xa4) returned 1 [0239.172] AreFileApisANSI () returned 1 [0239.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0239.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0239.172] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\uiBBGw38\\4t6obLcO.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\uibbgw38\\4t6oblco.mkv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\uiBBGw38\\4t6obLcO.mkv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\uibbgw38\\4t6oblco.mkv.cryptoid"), dwFlags=0x2) returned 1 [0239.173] AreFileApisANSI () returned 1 [0239.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0239.194] CloseHandle (hObject=0xa4) returned 1 [0239.194] AreFileApisANSI () returned 1 [0239.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0239.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493e70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0239.195] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\uiBBGw38\\iD vcPZAH7.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\uibbgw38\\id vcpzah7.mp4"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\uiBBGw38\\iD vcPZAH7.mp4.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\uibbgw38\\id vcpzah7.mp4.cryptoid"), dwFlags=0x2) returned 1 [0239.196] AreFileApisANSI () returned 1 [0239.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0239.257] CloseHandle (hObject=0xa4) returned 1 [0239.257] AreFileApisANSI () returned 1 [0239.257] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0239.257] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493b28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0239.257] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\uiBBGw38\\O7EsfxX7k-4S9t6VnmA.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\uibbgw38\\o7esfxx7k-4s9t6vnma.mkv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\uiBBGw38\\O7EsfxX7k-4S9t6VnmA.mkv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\uibbgw38\\o7esfxx7k-4s9t6vnma.mkv.cryptoid"), dwFlags=0x2) returned 1 [0239.258] AreFileApisANSI () returned 1 [0239.258] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0239.325] CloseHandle (hObject=0xa4) returned 1 [0239.325] AreFileApisANSI () returned 1 [0239.325] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0239.325] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x493ee8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0239.325] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\uiBBGw38\\SE_kL-z TR.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\uibbgw38\\se_kl-z tr.mp4"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\uiBBGw38\\SE_kL-z TR.mp4.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\uibbgw38\\se_kl-z tr.mp4.cryptoid"), dwFlags=0x2) returned 1 [0239.326] AreFileApisANSI () returned 1 [0239.326] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0239.380] CloseHandle (hObject=0xa4) returned 1 [0239.380] AreFileApisANSI () returned 1 [0239.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dbc20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0239.380] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4939c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0239.380] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\uiBBGw38\\xhd126x9qb6601O.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\uibbgw38\\xhd126x9qb6601o.mkv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\NmpUvrao4pwxXSd1Du9\\uiBBGw38\\xhd126x9qb6601O.mkv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\nmpuvrao4pwxxsd1du9\\uibbgw38\\xhd126x9qb6601o.mkv.cryptoid"), dwFlags=0x2) returned 1 [0239.381] AreFileApisANSI () returned 1 [0239.382] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0239.426] CloseHandle (hObject=0x9c) returned 1 [0239.426] AreFileApisANSI () returned 1 [0239.426] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0239.426] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ce30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0239.426] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\oyxXx8JO.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\oyxxx8jo.flv"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\oyxXx8JO.flv.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\oyxxx8jo.flv.cryptoid"), dwFlags=0x2) returned 1 [0239.427] AreFileApisANSI () returned 1 [0239.427] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0239.519] CloseHandle (hObject=0x9c) returned 1 [0239.519] AreFileApisANSI () returned 1 [0239.519] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0239.519] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495e50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0239.519] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\Un81.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\un81.swf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\IxAFCaX02CMQF\\Un81.swf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ixafcax02cmqf\\un81.swf.cryptoid"), dwFlags=0x2) returned 1 [0239.520] AreFileApisANSI () returned 1 [0239.520] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0239.584] CloseHandle (hObject=0x98) returned 1 [0239.584] AreFileApisANSI () returned 1 [0239.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dd840, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0239.584] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495a18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0239.584] MoveFileExW (lpExistingFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\Q9Qu1Ldtcs4InMeay.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\q9qu1ldtcs4inmeay.swf"), lpNewFileName="C:\\\\Users\\CIiHmnxMn6Ps\\Videos\\Q9Qu1Ldtcs4InMeay.swf.cryptoid" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\q9qu1ldtcs4inmeay.swf.cryptoid"), dwFlags=0x2) returned 1 [0239.591] AreFileApisANSI () returned 1 [0239.591] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 39 [0242.466] AreFileApisANSI () returned 1 [0242.466] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0242.469] AreFileApisANSI () returned 1 [0242.469] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 39 [0242.469] AreFileApisANSI () returned 1 [0242.470] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0242.470] AreFileApisANSI () returned 1 [0242.470] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f570, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0242.470] AreFileApisANSI () returned 1 [0242.470] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f378, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0242.470] AreFileApisANSI () returned 1 [0242.470] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0242.470] AreFileApisANSI () returned 1 [0242.470] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0242.471] AreFileApisANSI () returned 1 [0242.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0242.471] AreFileApisANSI () returned 1 [0242.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0242.471] AreFileApisANSI () returned 1 [0242.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0242.472] AreFileApisANSI () returned 1 [0242.472] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0242.472] AreFileApisANSI () returned 1 [0242.472] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0242.473] AreFileApisANSI () returned 1 [0242.473] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0242.473] AreFileApisANSI () returned 1 [0242.473] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0242.474] AreFileApisANSI () returned 1 [0242.474] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0242.474] AreFileApisANSI () returned 1 [0242.474] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0242.474] AreFileApisANSI () returned 1 [0242.474] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0242.475] AreFileApisANSI () returned 1 [0242.475] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0242.475] AreFileApisANSI () returned 1 [0242.475] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0242.475] AreFileApisANSI () returned 1 [0242.475] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0242.475] AreFileApisANSI () returned 1 [0242.475] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0242.476] AreFileApisANSI () returned 1 [0242.476] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0242.476] AreFileApisANSI () returned 1 [0242.476] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 101 [0242.476] AreFileApisANSI () returned 1 [0242.476] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0242.476] AreFileApisANSI () returned 1 [0242.476] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0242.476] AreFileApisANSI () returned 1 [0242.476] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0242.477] AreFileApisANSI () returned 1 [0242.477] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0242.477] AreFileApisANSI () returned 1 [0242.477] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0242.477] AreFileApisANSI () returned 1 [0242.477] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0242.477] AreFileApisANSI () returned 1 [0242.477] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0242.478] AreFileApisANSI () returned 1 [0242.478] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0242.478] AreFileApisANSI () returned 1 [0242.478] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0242.478] AreFileApisANSI () returned 1 [0242.478] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0242.478] AreFileApisANSI () returned 1 [0242.478] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0242.479] AreFileApisANSI () returned 1 [0242.479] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0242.479] AreFileApisANSI () returned 1 [0242.479] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0242.479] AreFileApisANSI () returned 1 [0242.479] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0242.479] AreFileApisANSI () returned 1 [0242.479] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0242.479] AreFileApisANSI () returned 1 [0242.479] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0242.480] AreFileApisANSI () returned 1 [0242.480] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0242.480] AreFileApisANSI () returned 1 [0242.480] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0242.480] AreFileApisANSI () returned 1 [0242.480] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4988a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0242.481] AreFileApisANSI () returned 1 [0242.481] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0242.481] AreFileApisANSI () returned 1 [0242.481] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0242.481] AreFileApisANSI () returned 1 [0242.481] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0242.482] AreFileApisANSI () returned 1 [0242.482] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0242.482] AreFileApisANSI () returned 1 [0242.482] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0242.483] AreFileApisANSI () returned 1 [0242.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497558, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0242.483] AreFileApisANSI () returned 1 [0242.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0242.483] AreFileApisANSI () returned 1 [0242.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0242.483] AreFileApisANSI () returned 1 [0242.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0242.497] AreFileApisANSI () returned 1 [0242.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0242.501] AreFileApisANSI () returned 1 [0242.501] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0242.507] AreFileApisANSI () returned 1 [0242.507] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0242.512] AreFileApisANSI () returned 1 [0242.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0242.516] AreFileApisANSI () returned 1 [0242.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0242.522] AreFileApisANSI () returned 1 [0242.522] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497078, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0242.523] AreFileApisANSI () returned 1 [0242.523] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0242.524] AreFileApisANSI () returned 1 [0242.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0242.524] AreFileApisANSI () returned 1 [0242.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4983a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0242.524] AreFileApisANSI () returned 1 [0242.524] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498828, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0242.525] AreFileApisANSI () returned 1 [0242.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4987a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0242.525] AreFileApisANSI () returned 1 [0242.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0242.525] AreFileApisANSI () returned 1 [0242.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0242.525] AreFileApisANSI () returned 1 [0242.525] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0242.526] AreFileApisANSI () returned 1 [0242.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0242.526] AreFileApisANSI () returned 1 [0242.526] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0242.527] AreFileApisANSI () returned 1 [0242.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0242.527] AreFileApisANSI () returned 1 [0242.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0242.527] AreFileApisANSI () returned 1 [0242.527] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0242.528] AreFileApisANSI () returned 1 [0242.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0242.528] AreFileApisANSI () returned 1 [0242.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ce30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0242.529] AreFileApisANSI () returned 1 [0242.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0242.529] AreFileApisANSI () returned 1 [0242.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d1a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0242.529] AreFileApisANSI () returned 1 [0242.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4971b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0242.529] AreFileApisANSI () returned 1 [0242.529] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0242.530] AreFileApisANSI () returned 1 [0242.530] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0242.530] AreFileApisANSI () returned 1 [0242.530] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4988a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0242.530] AreFileApisANSI () returned 1 [0242.530] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4983a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0242.530] AreFileApisANSI () returned 1 [0242.530] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4988a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0242.531] AreFileApisANSI () returned 1 [0242.531] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0242.535] AreFileApisANSI () returned 1 [0242.535] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0248.507] AreFileApisANSI () returned 1 [0248.507] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0248.510] AreFileApisANSI () returned 1 [0248.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498828, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0248.968] AreFileApisANSI () returned 1 [0248.968] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4985a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0248.968] AreFileApisANSI () returned 1 [0248.968] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498828, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0248.969] AreFileApisANSI () returned 1 [0248.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4980a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0248.969] AreFileApisANSI () returned 1 [0248.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498528, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0248.969] AreFileApisANSI () returned 1 [0248.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0248.969] AreFileApisANSI () returned 1 [0248.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0248.969] AreFileApisANSI () returned 1 [0248.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0248.970] AreFileApisANSI () returned 1 [0248.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0248.970] AreFileApisANSI () returned 1 [0248.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0248.974] AreFileApisANSI () returned 1 [0248.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4974f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0248.977] AreFileApisANSI () returned 1 [0248.977] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0248.981] AreFileApisANSI () returned 1 [0248.981] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497218, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0248.982] AreFileApisANSI () returned 1 [0248.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0248.982] AreFileApisANSI () returned 1 [0248.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4972e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0248.982] AreFileApisANSI () returned 1 [0248.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ea8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0248.986] AreFileApisANSI () returned 1 [0248.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4987a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0248.989] AreFileApisANSI () returned 1 [0248.989] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ca8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0248.993] AreFileApisANSI () returned 1 [0248.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0248.993] AreFileApisANSI () returned 1 [0248.993] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0248.994] AreFileApisANSI () returned 1 [0248.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fa40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 107 [0248.994] AreFileApisANSI () returned 1 [0248.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0248.994] AreFileApisANSI () returned 1 [0248.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fc08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0248.994] AreFileApisANSI () returned 1 [0248.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a00c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0248.995] AreFileApisANSI () returned 1 [0248.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f580, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0248.996] AreFileApisANSI () returned 1 [0248.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fd38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 102 [0248.996] AreFileApisANSI () returned 1 [0248.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fad8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 105 [0248.997] AreFileApisANSI () returned 1 [0248.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fdd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0249.006] AreFileApisANSI () returned 1 [0249.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 103 [0249.009] AreFileApisANSI () returned 1 [0249.009] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49fca0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 106 [0249.013] AreFileApisANSI () returned 1 [0249.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f878, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0249.018] AreFileApisANSI () returned 1 [0249.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49f748, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 109 [0249.021] AreFileApisANSI () returned 1 [0249.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4a0030, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0249.026] AreFileApisANSI () returned 1 [0249.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0249.026] AreFileApisANSI () returned 1 [0249.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4975c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0249.026] AreFileApisANSI () returned 1 [0249.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4970e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0249.027] AreFileApisANSI () returned 1 [0249.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0249.027] AreFileApisANSI () returned 1 [0249.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0249.027] AreFileApisANSI () returned 1 [0249.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0249.028] AreFileApisANSI () returned 1 [0249.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0249.028] AreFileApisANSI () returned 1 [0249.028] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f688, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0249.029] AreFileApisANSI () returned 1 [0249.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0249.029] AreFileApisANSI () returned 1 [0249.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f378, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0249.029] AreFileApisANSI () returned 1 [0249.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f538, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0249.029] AreFileApisANSI () returned 1 [0249.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0249.030] AreFileApisANSI () returned 1 [0249.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495b80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0249.034] AreFileApisANSI () returned 1 [0249.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f308, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.037] AreFileApisANSI () returned 1 [0249.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4958b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0249.041] AreFileApisANSI () returned 1 [0249.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0249.042] AreFileApisANSI () returned 1 [0249.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0249.042] AreFileApisANSI () returned 1 [0249.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0249.042] AreFileApisANSI () returned 1 [0249.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0249.043] AreFileApisANSI () returned 1 [0249.043] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0249.043] AreFileApisANSI () returned 1 [0249.043] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0249.043] AreFileApisANSI () returned 1 [0249.043] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0249.044] AreFileApisANSI () returned 1 [0249.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0249.044] AreFileApisANSI () returned 1 [0249.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 59 [0249.045] AreFileApisANSI () returned 1 [0249.045] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495e50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0249.045] AreFileApisANSI () returned 1 [0249.045] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.045] AreFileApisANSI () returned 1 [0249.045] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495bc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0249.045] AreFileApisANSI () returned 1 [0249.045] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495ee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0249.046] AreFileApisANSI () returned 1 [0249.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f308, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.046] AreFileApisANSI () returned 1 [0249.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495fb8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0249.046] AreFileApisANSI () returned 1 [0249.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0249.046] AreFileApisANSI () returned 1 [0249.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 42 [0249.046] AreFileApisANSI () returned 1 [0249.047] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f378, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0249.047] AreFileApisANSI () returned 1 [0249.047] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0249.047] AreFileApisANSI () returned 1 [0249.047] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0249.047] AreFileApisANSI () returned 1 [0249.047] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0249.048] AreFileApisANSI () returned 1 [0249.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0249.048] AreFileApisANSI () returned 1 [0249.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 42 [0249.049] AreFileApisANSI () returned 1 [0249.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0249.049] AreFileApisANSI () returned 1 [0249.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495e98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0249.053] AreFileApisANSI () returned 1 [0249.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0249.058] AreFileApisANSI () returned 1 [0249.058] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495e08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0249.063] AreFileApisANSI () returned 1 [0249.063] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0249.064] AreFileApisANSI () returned 1 [0249.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f378, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0249.064] AreFileApisANSI () returned 1 [0249.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f538, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0249.065] AreFileApisANSI () returned 1 [0249.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0249.065] AreFileApisANSI () returned 1 [0249.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f650, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0249.065] AreFileApisANSI () returned 1 [0249.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0249.065] AreFileApisANSI () returned 1 [0249.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495b38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0249.066] AreFileApisANSI () returned 1 [0249.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.066] AreFileApisANSI () returned 1 [0249.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495d78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0249.066] AreFileApisANSI () returned 1 [0249.066] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.067] AreFileApisANSI () returned 1 [0249.067] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0249.067] AreFileApisANSI () returned 1 [0249.067] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.067] AreFileApisANSI () returned 1 [0249.067] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0249.067] AreFileApisANSI () returned 1 [0249.067] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0249.068] AreFileApisANSI () returned 1 [0249.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0249.068] AreFileApisANSI () returned 1 [0249.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.073] AreFileApisANSI () returned 1 [0249.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0249.077] AreFileApisANSI () returned 1 [0249.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f4c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.082] AreFileApisANSI () returned 1 [0249.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495a60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0249.082] AreFileApisANSI () returned 1 [0249.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0249.083] AreFileApisANSI () returned 1 [0249.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495b80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0249.083] AreFileApisANSI () returned 1 [0249.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0249.084] AreFileApisANSI () returned 1 [0249.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.084] AreFileApisANSI () returned 1 [0249.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x496000, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0249.084] AreFileApisANSI () returned 1 [0249.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.084] AreFileApisANSI () returned 1 [0249.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0249.085] AreFileApisANSI () returned 1 [0249.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.085] AreFileApisANSI () returned 1 [0249.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0249.085] AreFileApisANSI () returned 1 [0249.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f650, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0249.086] AreFileApisANSI () returned 1 [0249.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f538, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0249.086] AreFileApisANSI () returned 1 [0249.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0249.087] CloseHandle (hObject=0x90) returned 1 [0249.087] AreFileApisANSI () returned 1 [0249.087] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 35 [0249.088] CloseHandle (hObject=0x90) returned 1 [0249.088] AreFileApisANSI () returned 1 [0249.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0249.089] CloseHandle (hObject=0x90) returned 1 [0249.089] AreFileApisANSI () returned 1 [0249.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0249.090] CloseHandle (hObject=0x94) returned 1 [0249.091] AreFileApisANSI () returned 1 [0249.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 51 [0249.099] CloseHandle (hObject=0x94) returned 1 [0249.099] AreFileApisANSI () returned 1 [0249.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0249.101] CloseHandle (hObject=0x94) returned 1 [0249.101] AreFileApisANSI () returned 1 [0249.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.101] AreFileApisANSI () returned 1 [0249.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f688, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0249.102] AreFileApisANSI () returned 1 [0249.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.102] AreFileApisANSI () returned 1 [0249.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f4c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0249.103] CloseHandle (hObject=0x94) returned 1 [0249.103] AreFileApisANSI () returned 1 [0249.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0249.104] CloseHandle (hObject=0x94) returned 1 [0249.104] AreFileApisANSI () returned 1 [0249.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0249.104] CloseHandle (hObject=0x94) returned 1 [0249.105] AreFileApisANSI () returned 1 [0249.105] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0249.106] CloseHandle (hObject=0x98) returned 1 [0249.106] AreFileApisANSI () returned 1 [0249.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0249.107] CloseHandle (hObject=0x98) returned 1 [0249.107] AreFileApisANSI () returned 1 [0249.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0249.109] CloseHandle (hObject=0x98) returned 1 [0249.109] AreFileApisANSI () returned 1 [0249.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0249.110] CloseHandle (hObject=0x98) returned 1 [0249.110] AreFileApisANSI () returned 1 [0249.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0249.112] CloseHandle (hObject=0x98) returned 1 [0249.112] AreFileApisANSI () returned 1 [0249.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0249.114] CloseHandle (hObject=0x98) returned 1 [0249.114] AreFileApisANSI () returned 1 [0249.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0249.115] CloseHandle (hObject=0x98) returned 1 [0249.115] AreFileApisANSI () returned 1 [0249.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0249.116] CloseHandle (hObject=0x98) returned 1 [0249.116] AreFileApisANSI () returned 1 [0249.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0249.118] CloseHandle (hObject=0x98) returned 1 [0249.118] AreFileApisANSI () returned 1 [0249.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0249.119] CloseHandle (hObject=0x94) returned 1 [0249.119] AreFileApisANSI () returned 1 [0249.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0249.121] CloseHandle (hObject=0x94) returned 1 [0249.121] AreFileApisANSI () returned 1 [0249.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f378, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0249.122] CloseHandle (hObject=0x94) returned 1 [0249.122] AreFileApisANSI () returned 1 [0249.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0249.124] CloseHandle (hObject=0x94) returned 1 [0249.124] AreFileApisANSI () returned 1 [0249.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f570, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0249.125] CloseHandle (hObject=0x94) returned 1 [0249.125] AreFileApisANSI () returned 1 [0249.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0249.126] CloseHandle (hObject=0x94) returned 1 [0249.126] AreFileApisANSI () returned 1 [0249.126] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f650, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0249.128] CloseHandle (hObject=0x94) returned 1 [0249.128] AreFileApisANSI () returned 1 [0249.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f650, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0249.129] CloseHandle (hObject=0x94) returned 1 [0249.129] AreFileApisANSI () returned 1 [0249.129] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f688, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0249.132] CloseHandle (hObject=0x94) returned 1 [0249.132] AreFileApisANSI () returned 1 [0249.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0249.133] CloseHandle (hObject=0x94) returned 1 [0249.133] AreFileApisANSI () returned 1 [0249.133] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 44 [0249.134] CloseHandle (hObject=0x94) returned 1 [0249.134] AreFileApisANSI () returned 1 [0249.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 47 [0249.136] CloseHandle (hObject=0x94) returned 1 [0249.136] AreFileApisANSI () returned 1 [0249.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0249.137] CloseHandle (hObject=0x94) returned 1 [0249.137] AreFileApisANSI () returned 1 [0249.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 42 [0249.138] CloseHandle (hObject=0x94) returned 1 [0249.138] AreFileApisANSI () returned 1 [0249.138] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0249.140] CloseHandle (hObject=0x94) returned 1 [0249.140] AreFileApisANSI () returned 1 [0249.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f378, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0249.140] AreFileApisANSI () returned 1 [0249.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4925b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0249.140] AreFileApisANSI () returned 1 [0249.140] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 33 [0249.141] AreFileApisANSI () returned 1 [0249.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f3e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 40 [0249.141] AreFileApisANSI () returned 1 [0249.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f688, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 37 [0249.141] AreFileApisANSI () returned 1 [0249.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 40 [0249.141] AreFileApisANSI () returned 1 [0249.141] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0249.142] AreFileApisANSI () returned 1 [0249.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 40 [0249.143] AreFileApisANSI () returned 1 [0249.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0249.143] AreFileApisANSI () returned 1 [0249.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0249.144] AreFileApisANSI () returned 1 [0249.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0249.144] AreFileApisANSI () returned 1 [0249.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0249.144] AreFileApisANSI () returned 1 [0249.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0249.144] AreFileApisANSI () returned 1 [0249.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0249.145] AreFileApisANSI () returned 1 [0249.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0249.145] AreFileApisANSI () returned 1 [0249.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495a60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0249.145] AreFileApisANSI () returned 1 [0249.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495d78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0249.145] AreFileApisANSI () returned 1 [0249.145] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495c58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0249.146] AreFileApisANSI () returned 1 [0249.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f570, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 42 [0249.146] AreFileApisANSI () returned 1 [0249.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 39 [0249.146] AreFileApisANSI () returned 1 [0249.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f378, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 42 [0249.146] AreFileApisANSI () returned 1 [0249.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0249.147] AreFileApisANSI () returned 1 [0249.147] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0249.147] AreFileApisANSI () returned 1 [0249.147] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0249.147] AreFileApisANSI () returned 1 [0249.147] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495f28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0249.148] AreFileApisANSI () returned 1 [0249.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f420, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.148] AreFileApisANSI () returned 1 [0249.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495ee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0249.148] AreFileApisANSI () returned 1 [0249.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0249.148] AreFileApisANSI () returned 1 [0249.148] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0249.149] AreFileApisANSI () returned 1 [0249.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0249.149] AreFileApisANSI () returned 1 [0249.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0249.149] AreFileApisANSI () returned 1 [0249.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f490, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0249.149] AreFileApisANSI () returned 1 [0249.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f688, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0249.150] AreFileApisANSI () returned 1 [0249.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.150] AreFileApisANSI () returned 1 [0249.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f340, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0249.150] AreFileApisANSI () returned 1 [0249.150] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.151] AreFileApisANSI () returned 1 [0249.151] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f650, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 42 [0249.151] AreFileApisANSI () returned 1 [0249.151] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 39 [0249.151] AreFileApisANSI () returned 1 [0249.151] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f618, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 42 [0249.151] AreFileApisANSI () returned 1 [0249.152] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.157] GetLastError () returned 0x5 [0249.157] GetLastError () returned 0x5 [0249.157] AreFileApisANSI () returned 1 [0249.157] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f500, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 43 [0249.157] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dcfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.161] GetLastError () returned 0x5 [0249.161] GetLastError () returned 0x5 [0249.161] AreFileApisANSI () returned 1 [0249.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f538, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.162] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dcfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.166] GetLastError () returned 0x5 [0249.166] GetLastError () returned 0x5 [0249.166] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\*", lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 0x494ea0 [0249.167] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.167] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.167] AreFileApisANSI () returned 1 [0249.167] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495d78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0249.167] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\ADODB\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac\\adodb\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.168] GetLastError () returned 0x5 [0249.168] GetLastError () returned 0x5 [0249.168] AreFileApisANSI () returned 1 [0249.168] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495c58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0249.168] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\ADODB\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac\\adodb\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.169] GetLastError () returned 0x5 [0249.169] GetLastError () returned 0x5 [0249.169] AreFileApisANSI () returned 1 [0249.169] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4958b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0249.169] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\ADODB\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac\\adodb\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.169] GetLastError () returned 0x5 [0249.169] GetLastError () returned 0x5 [0249.169] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\ADODB\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494da0 [0249.169] FindNextFileA (in: hFindFile=0x494da0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.169] FindNextFileA (in: hFindFile=0x494da0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.169] AreFileApisANSI () returned 1 [0249.169] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497760, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0249.169] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac\\adodb\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.170] GetLastError () returned 0x5 [0249.170] GetLastError () returned 0x5 [0249.170] AreFileApisANSI () returned 1 [0249.170] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0249.170] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac\\adodb\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.170] GetLastError () returned 0x5 [0249.170] GetLastError () returned 0x5 [0249.170] AreFileApisANSI () returned 1 [0249.170] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4973b8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0249.170] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac\\adodb\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.170] GetLastError () returned 0x5 [0249.170] GetLastError () returned 0x5 [0249.170] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494e60 [0249.170] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.171] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.171] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.171] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.171] FindClose (in: hFindFile=0x494e60 | out: hFindFile=0x494e60) returned 1 [0249.171] FindNextFileA (in: hFindFile=0x494da0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.171] FindClose (in: hFindFile=0x494da0 | out: hFindFile=0x494da0) returned 1 [0249.171] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.171] AreFileApisANSI () returned 1 [0249.171] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0249.171] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Extensibility\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac\\extensibility\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.172] GetLastError () returned 0x5 [0249.172] GetLastError () returned 0x5 [0249.172] AreFileApisANSI () returned 1 [0249.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 57 [0249.172] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Extensibility\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac\\extensibility\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.172] GetLastError () returned 0x5 [0249.172] GetLastError () returned 0x5 [0249.172] AreFileApisANSI () returned 1 [0249.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0249.172] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Extensibility\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac\\extensibility\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.172] GetLastError () returned 0x5 [0249.172] GetLastError () returned 0x5 [0249.172] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\Extensibility\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x4948e0 [0249.173] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.173] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.173] AreFileApisANSI () returned 1 [0249.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4985a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0249.173] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac\\extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.173] GetLastError () returned 0x5 [0249.173] GetLastError () returned 0x5 [0249.173] AreFileApisANSI () returned 1 [0249.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498728, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0249.174] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac\\extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.174] GetLastError () returned 0x5 [0249.174] GetLastError () returned 0x5 [0249.174] AreFileApisANSI () returned 1 [0249.174] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498228, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0249.174] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac\\extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.174] GetLastError () returned 0x5 [0249.174] GetLastError () returned 0x5 [0249.174] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494be0 [0249.174] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.174] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.174] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.174] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.175] FindClose (in: hFindFile=0x494be0 | out: hFindFile=0x494be0) returned 1 [0249.175] FindNextFileA (in: hFindFile=0x4948e0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.175] FindClose (in: hFindFile=0x4948e0 | out: hFindFile=0x4948e0) returned 1 [0249.175] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.175] AreFileApisANSI () returned 1 [0249.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0249.175] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.mshtml\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac\\microsoft.mshtml\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.176] GetLastError () returned 0x5 [0249.176] GetLastError () returned 0x5 [0249.176] AreFileApisANSI () returned 1 [0249.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0249.176] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.mshtml\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac\\microsoft.mshtml\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.176] GetLastError () returned 0x5 [0249.176] GetLastError () returned 0x5 [0249.176] AreFileApisANSI () returned 1 [0249.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0249.176] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.mshtml\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac\\microsoft.mshtml\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.176] GetLastError () returned 0x5 [0249.176] GetLastError () returned 0x5 [0249.176] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.mshtml\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494ce0 [0249.177] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.177] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.177] AreFileApisANSI () returned 1 [0249.177] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498428, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0249.177] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac\\microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.178] GetLastError () returned 0x5 [0249.178] GetLastError () returned 0x5 [0249.178] AreFileApisANSI () returned 1 [0249.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497da8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0249.178] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac\\microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.178] GetLastError () returned 0x5 [0249.178] GetLastError () returned 0x5 [0249.178] AreFileApisANSI () returned 1 [0249.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498428, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0249.178] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac\\microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.179] GetLastError () returned 0x5 [0249.179] GetLastError () returned 0x5 [0249.179] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494c20 [0249.179] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.179] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.179] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.179] FindNextFileA (in: hFindFile=0x494c20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.179] FindClose (in: hFindFile=0x494c20 | out: hFindFile=0x494c20) returned 1 [0249.179] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.179] FindClose (in: hFindFile=0x494ce0 | out: hFindFile=0x494ce0) returned 1 [0249.179] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.179] AreFileApisANSI () returned 1 [0249.179] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d3b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0249.179] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac\\microsoft.stdformat\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.180] GetLastError () returned 0x5 [0249.180] GetLastError () returned 0x5 [0249.180] AreFileApisANSI () returned 1 [0249.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0249.180] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac\\microsoft.stdformat\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.180] GetLastError () returned 0x5 [0249.180] GetLastError () returned 0x5 [0249.180] AreFileApisANSI () returned 1 [0249.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49d148, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0249.181] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac\\microsoft.stdformat\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.181] GetLastError () returned 0x5 [0249.181] GetLastError () returned 0x5 [0249.181] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x4949e0 [0249.181] FindNextFileA (in: hFindFile=0x4949e0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.181] FindNextFileA (in: hFindFile=0x4949e0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.181] AreFileApisANSI () returned 1 [0249.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4983a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0249.181] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac\\microsoft.stdformat\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.185] GetLastError () returned 0x5 [0249.185] GetLastError () returned 0x5 [0249.185] AreFileApisANSI () returned 1 [0249.185] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0249.186] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac\\microsoft.stdformat\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.186] GetLastError () returned 0x5 [0249.186] GetLastError () returned 0x5 [0249.186] AreFileApisANSI () returned 1 [0249.186] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498228, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 95 [0249.186] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac\\microsoft.stdformat\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.186] GetLastError () returned 0x5 [0249.186] GetLastError () returned 0x5 [0249.186] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494e20 [0249.186] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.186] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.186] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.186] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.186] FindClose (in: hFindFile=0x494e20 | out: hFindFile=0x494e20) returned 1 [0249.186] FindNextFileA (in: hFindFile=0x4949e0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.187] FindClose (in: hFindFile=0x4949e0 | out: hFindFile=0x4949e0) returned 1 [0249.187] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.187] AreFileApisANSI () returned 1 [0249.187] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0249.187] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\mscomctl\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac\\mscomctl\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.187] GetLastError () returned 0x5 [0249.187] GetLastError () returned 0x5 [0249.187] AreFileApisANSI () returned 1 [0249.188] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 52 [0249.188] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\mscomctl\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac\\mscomctl\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.188] GetLastError () returned 0x5 [0249.188] GetLastError () returned 0x5 [0249.188] AreFileApisANSI () returned 1 [0249.188] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 55 [0249.188] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\mscomctl\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac\\mscomctl\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.188] GetLastError () returned 0x5 [0249.188] GetLastError () returned 0x5 [0249.188] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\mscomctl\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494a20 [0249.188] FindNextFileA (in: hFindFile=0x494a20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.188] FindNextFileA (in: hFindFile=0x494a20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.188] AreFileApisANSI () returned 1 [0249.188] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4986a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0249.188] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\mscomctl\\10.0.4504.0__31bf3856ad364e35\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac\\mscomctl\\10.0.4504.0__31bf3856ad364e35\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.189] GetLastError () returned 0x5 [0249.189] GetLastError () returned 0x5 [0249.189] AreFileApisANSI () returned 1 [0249.189] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4985a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0249.189] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\mscomctl\\10.0.4504.0__31bf3856ad364e35\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac\\mscomctl\\10.0.4504.0__31bf3856ad364e35\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.189] GetLastError () returned 0x5 [0249.189] GetLastError () returned 0x5 [0249.189] AreFileApisANSI () returned 1 [0249.189] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497ca8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0249.190] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\mscomctl\\10.0.4504.0__31bf3856ad364e35\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac\\mscomctl\\10.0.4504.0__31bf3856ad364e35\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.190] GetLastError () returned 0x5 [0249.190] GetLastError () returned 0x5 [0249.190] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\mscomctl\\10.0.4504.0__31bf3856ad364e35\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494fa0 [0249.190] FindNextFileA (in: hFindFile=0x494fa0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.190] FindNextFileA (in: hFindFile=0x494fa0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.190] FindNextFileA (in: hFindFile=0x494fa0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.190] FindNextFileA (in: hFindFile=0x494fa0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.190] FindClose (in: hFindFile=0x494fa0 | out: hFindFile=0x494fa0) returned 1 [0249.190] FindNextFileA (in: hFindFile=0x494a20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.190] FindClose (in: hFindFile=0x494a20 | out: hFindFile=0x494a20) returned 1 [0249.190] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.190] AreFileApisANSI () returned 1 [0249.190] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0249.190] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\MSDATASRC\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac\\msdatasrc\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.191] GetLastError () returned 0x5 [0249.191] GetLastError () returned 0x5 [0249.191] AreFileApisANSI () returned 1 [0249.191] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0249.191] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\MSDATASRC\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac\\msdatasrc\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.191] GetLastError () returned 0x5 [0249.191] GetLastError () returned 0x5 [0249.191] AreFileApisANSI () returned 1 [0249.191] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0249.191] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\MSDATASRC\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac\\msdatasrc\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.191] GetLastError () returned 0x5 [0249.191] GetLastError () returned 0x5 [0249.192] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\MSDATASRC\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494f60 [0249.192] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.192] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.192] AreFileApisANSI () returned 1 [0249.192] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498528, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0249.192] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac\\msdatasrc\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.193] GetLastError () returned 0x5 [0249.193] GetLastError () returned 0x5 [0249.193] AreFileApisANSI () returned 1 [0249.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498228, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0249.193] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac\\msdatasrc\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.193] GetLastError () returned 0x5 [0249.193] GetLastError () returned 0x5 [0249.193] AreFileApisANSI () returned 1 [0249.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498128, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0249.193] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac\\msdatasrc\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.193] GetLastError () returned 0x5 [0249.193] GetLastError () returned 0x5 [0249.193] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494920 [0249.194] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.194] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.194] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.194] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.194] FindClose (in: hFindFile=0x494920 | out: hFindFile=0x494920) returned 1 [0249.194] FindNextFileA (in: hFindFile=0x494f60, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.194] FindClose (in: hFindFile=0x494f60 | out: hFindFile=0x494f60) returned 1 [0249.194] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.194] AreFileApisANSI () returned 1 [0249.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0249.194] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\stdole\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac\\stdole\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.194] GetLastError () returned 0x5 [0249.194] GetLastError () returned 0x5 [0249.194] AreFileApisANSI () returned 1 [0249.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0249.194] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\stdole\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac\\stdole\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.195] GetLastError () returned 0x5 [0249.195] GetLastError () returned 0x5 [0249.195] AreFileApisANSI () returned 1 [0249.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0249.195] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\stdole\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac\\stdole\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.195] GetLastError () returned 0x5 [0249.195] GetLastError () returned 0x5 [0249.195] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\stdole\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494ce0 [0249.195] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.195] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.195] AreFileApisANSI () returned 1 [0249.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0249.195] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.196] GetLastError () returned 0x5 [0249.196] GetLastError () returned 0x5 [0249.196] AreFileApisANSI () returned 1 [0249.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497488, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0249.196] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.197] GetLastError () returned 0x5 [0249.197] GetLastError () returned 0x5 [0249.197] AreFileApisANSI () returned 1 [0249.197] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0249.197] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.197] GetLastError () returned 0x5 [0249.197] GetLastError () returned 0x5 [0249.197] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494e20 [0249.197] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.197] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.197] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.197] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.197] FindClose (in: hFindFile=0x494e20 | out: hFindFile=0x494e20) returned 1 [0249.197] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.198] FindClose (in: hFindFile=0x494ce0 | out: hFindFile=0x494ce0) returned 1 [0249.198] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 0 [0249.198] FindClose (in: hFindFile=0x494ea0 | out: hFindFile=0x494ea0) returned 1 [0249.198] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0249.198] AreFileApisANSI () returned 1 [0249.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495e08, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0249.198] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dcfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.202] GetLastError () returned 0x5 [0249.202] GetLastError () returned 0x5 [0249.202] AreFileApisANSI () returned 1 [0249.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48f5a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0249.203] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dcfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.208] GetLastError () returned 0x5 [0249.208] GetLastError () returned 0x5 [0249.208] AreFileApisANSI () returned 1 [0249.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x495988, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 49 [0249.208] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dcfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.213] GetLastError () returned 0x5 [0249.213] GetLastError () returned 0x5 [0249.213] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\*", lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 0x4949a0 [0249.213] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.213] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.214] AreFileApisANSI () returned 1 [0249.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49ccd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0249.214] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\CustomMarshalers\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\custommarshalers\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.215] GetLastError () returned 0x5 [0249.215] GetLastError () returned 0x5 [0249.215] AreFileApisANSI () returned 1 [0249.215] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0249.215] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\CustomMarshalers\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\custommarshalers\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.215] GetLastError () returned 0x5 [0249.215] GetLastError () returned 0x5 [0249.215] AreFileApisANSI () returned 1 [0249.215] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49cdd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 66 [0249.215] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\CustomMarshalers\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\custommarshalers\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.215] GetLastError () returned 0x5 [0249.215] GetLastError () returned 0x5 [0249.216] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\CustomMarshalers\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x4948a0 [0249.216] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.216] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.216] AreFileApisANSI () returned 1 [0249.216] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498ba8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0249.216] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\custommarshalers\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.216] GetLastError () returned 0x5 [0249.216] GetLastError () returned 0x5 [0249.216] AreFileApisANSI () returned 1 [0249.216] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498aa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0249.216] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\custommarshalers\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.217] GetLastError () returned 0x5 [0249.217] GetLastError () returned 0x5 [0249.217] AreFileApisANSI () returned 1 [0249.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498328, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0249.217] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\custommarshalers\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.217] GetLastError () returned 0x5 [0249.217] GetLastError () returned 0x5 [0249.217] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494be0 [0249.217] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.217] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.217] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.217] FindClose (in: hFindFile=0x494be0 | out: hFindFile=0x494be0) returned 1 [0249.217] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.217] FindClose (in: hFindFile=0x4948a0 | out: hFindFile=0x4948a0) returned 1 [0249.217] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.217] AreFileApisANSI () returned 1 [0249.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0249.217] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\ISymWrapper\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\isymwrapper\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.234] GetLastError () returned 0x5 [0249.234] GetLastError () returned 0x5 [0249.234] AreFileApisANSI () returned 1 [0249.234] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0249.234] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\ISymWrapper\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\isymwrapper\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.234] GetLastError () returned 0x5 [0249.234] GetLastError () returned 0x5 [0249.234] AreFileApisANSI () returned 1 [0249.234] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0249.234] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\ISymWrapper\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\isymwrapper\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.235] GetLastError () returned 0x5 [0249.235] GetLastError () returned 0x5 [0249.235] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\ISymWrapper\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494aa0 [0249.235] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.235] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.235] AreFileApisANSI () returned 1 [0249.235] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4985a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0249.235] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\isymwrapper\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.235] GetLastError () returned 0x5 [0249.235] GetLastError () returned 0x5 [0249.235] AreFileApisANSI () returned 1 [0249.235] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497fa8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0249.235] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\isymwrapper\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.236] GetLastError () returned 0x5 [0249.236] GetLastError () returned 0x5 [0249.236] AreFileApisANSI () returned 1 [0249.236] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0249.236] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\isymwrapper\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.236] GetLastError () returned 0x5 [0249.236] GetLastError () returned 0x5 [0249.236] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494c60 [0249.236] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.236] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.236] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.237] FindClose (in: hFindFile=0x494c60 | out: hFindFile=0x494c60) returned 1 [0249.237] FindNextFileA (in: hFindFile=0x494aa0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.237] FindClose (in: hFindFile=0x494aa0 | out: hFindFile=0x494aa0) returned 1 [0249.237] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.237] AreFileApisANSI () returned 1 [0249.237] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0249.237] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.ink\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.237] GetLastError () returned 0x5 [0249.237] GetLastError () returned 0x5 [0249.237] AreFileApisANSI () returned 1 [0249.237] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60 [0249.237] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.ink\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.237] GetLastError () returned 0x5 [0249.237] GetLastError () returned 0x5 [0249.238] AreFileApisANSI () returned 1 [0249.238] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x48af10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0249.238] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.ink\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.238] GetLastError () returned 0x5 [0249.238] GetLastError () returned 0x5 [0249.238] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494fa0 [0249.238] FindNextFileA (in: hFindFile=0x494fa0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.238] FindNextFileA (in: hFindFile=0x494fa0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.238] AreFileApisANSI () returned 1 [0249.238] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0249.238] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.ink\\6.1.0.0__31bf3856ad364e35\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.239] GetLastError () returned 0x5 [0249.239] GetLastError () returned 0x5 [0249.239] AreFileApisANSI () returned 1 [0249.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498828, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0249.239] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.ink\\6.1.0.0__31bf3856ad364e35\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.239] GetLastError () returned 0x5 [0249.239] GetLastError () returned 0x5 [0249.239] AreFileApisANSI () returned 1 [0249.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x498228, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0249.239] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.ink\\6.1.0.0__31bf3856ad364e35\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.240] GetLastError () returned 0x5 [0249.240] GetLastError () returned 0x5 [0249.240] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494ce0 [0249.240] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.240] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.240] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.240] FindClose (in: hFindFile=0x494ce0 | out: hFindFile=0x494ce0) returned 1 [0249.240] FindNextFileA (in: hFindFile=0x494fa0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.240] FindClose (in: hFindFile=0x494fa0 | out: hFindFile=0x494fa0) returned 1 [0249.240] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.240] AreFileApisANSI () returned 1 [0249.240] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x497628, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0249.240] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.interop.security.azroles\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.240] GetLastError () returned 0x5 [0249.240] GetLastError () returned 0x5 [0249.241] AreFileApisANSI () returned 1 [0249.241] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4977c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0249.241] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.interop.security.azroles\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.241] GetLastError () returned 0x5 [0249.241] GetLastError () returned 0x5 [0249.241] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.interop.security.azroles\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.241] GetLastError () returned 0x5 [0249.241] GetLastError () returned 0x5 [0249.241] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494e60 [0249.241] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.241] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.241] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.interop.security.azroles\\2.0.0.0__31bf3856ad364e35\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.242] GetLastError () returned 0x5 [0249.242] GetLastError () returned 0x5 [0249.242] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.interop.security.azroles\\2.0.0.0__31bf3856ad364e35\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.242] GetLastError () returned 0x5 [0249.242] GetLastError () returned 0x5 [0249.242] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.interop.security.azroles\\2.0.0.0__31bf3856ad364e35\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.242] GetLastError () returned 0x5 [0249.242] GetLastError () returned 0x5 [0249.242] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494de0 [0249.242] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.243] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.243] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.243] FindClose (in: hFindFile=0x494de0 | out: hFindFile=0x494de0) returned 1 [0249.243] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.243] FindClose (in: hFindFile=0x494e60 | out: hFindFile=0x494e60) returned 1 [0249.243] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.243] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.transactions.bridge.dtc\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.243] GetLastError () returned 0x5 [0249.244] GetLastError () returned 0x5 [0249.244] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.transactions.bridge.dtc\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.244] GetLastError () returned 0x5 [0249.244] GetLastError () returned 0x5 [0249.244] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.transactions.bridge.dtc\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.244] GetLastError () returned 0x5 [0249.244] GetLastError () returned 0x5 [0249.244] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494fa0 [0249.244] FindNextFileA (in: hFindFile=0x494fa0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.244] FindNextFileA (in: hFindFile=0x494fa0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.244] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.transactions.bridge.dtc\\3.0.0.0__b03f5f7f11d50a3a\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.245] GetLastError () returned 0x5 [0249.245] GetLastError () returned 0x5 [0249.245] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.transactions.bridge.dtc\\3.0.0.0__b03f5f7f11d50a3a\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.245] GetLastError () returned 0x5 [0249.245] GetLastError () returned 0x5 [0249.245] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\microsoft.transactions.bridge.dtc\\3.0.0.0__b03f5f7f11d50a3a\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.245] GetLastError () returned 0x5 [0249.245] GetLastError () returned 0x5 [0249.245] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494be0 [0249.245] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.245] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.245] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.246] FindClose (in: hFindFile=0x494be0 | out: hFindFile=0x494be0) returned 1 [0249.246] FindNextFileA (in: hFindFile=0x494fa0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.246] FindClose (in: hFindFile=0x494fa0 | out: hFindFile=0x494fa0) returned 1 [0249.246] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.246] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\MSBuild\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\msbuild\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.246] GetLastError () returned 0x5 [0249.246] GetLastError () returned 0x5 [0249.246] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\MSBuild\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\msbuild\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.247] GetLastError () returned 0x5 [0249.247] GetLastError () returned 0x5 [0249.247] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\MSBuild\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\msbuild\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.247] GetLastError () returned 0x5 [0249.247] GetLastError () returned 0x5 [0249.247] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\MSBuild\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494d20 [0249.247] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.247] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.247] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\msbuild\\3.5.0.0__b03f5f7f11d50a3a\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.248] GetLastError () returned 0x5 [0249.248] GetLastError () returned 0x5 [0249.248] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\msbuild\\3.5.0.0__b03f5f7f11d50a3a\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.248] GetLastError () returned 0x5 [0249.248] GetLastError () returned 0x5 [0249.248] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\msbuild\\3.5.0.0__b03f5f7f11d50a3a\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.249] GetLastError () returned 0x5 [0249.249] GetLastError () returned 0x5 [0249.249] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494920 [0249.249] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.249] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.249] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.249] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\msbuild.exe.config" (normalized: "c:\\windows\\assembly\\gac_32\\msbuild\\3.5.0.0__b03f5f7f11d50a3a\\msbuild.exe.config"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbcd8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.250] GetLastError () returned 0x5 [0249.250] GetLastError () returned 0x5 [0249.250] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.251] FindClose (in: hFindFile=0x494920 | out: hFindFile=0x494920) returned 1 [0249.251] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.251] FindClose (in: hFindFile=0x494d20 | out: hFindFile=0x494d20) returned 1 [0249.251] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.251] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\mscorlib\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.252] GetLastError () returned 0x5 [0249.252] GetLastError () returned 0x5 [0249.252] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\mscorlib\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.252] GetLastError () returned 0x5 [0249.252] GetLastError () returned 0x5 [0249.252] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\mscorlib\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.252] GetLastError () returned 0x5 [0249.252] GetLastError () returned 0x5 [0249.252] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\mscorlib\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494da0 [0249.252] FindNextFileA (in: hFindFile=0x494da0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.252] FindNextFileA (in: hFindFile=0x494da0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.253] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.257] GetLastError () returned 0x5 [0249.257] GetLastError () returned 0x5 [0249.257] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.262] GetLastError () returned 0x5 [0249.262] GetLastError () returned 0x5 [0249.262] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.266] GetLastError () returned 0x5 [0249.266] GetLastError () returned 0x5 [0249.266] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494de0 [0249.266] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.266] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.266] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.266] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.267] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.267] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.267] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.267] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.267] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.267] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.267] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.267] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.267] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.267] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.267] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.267] FindNextFileA (in: hFindFile=0x494de0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.267] FindClose (in: hFindFile=0x494de0 | out: hFindFile=0x494de0) returned 1 [0249.268] FindNextFileA (in: hFindFile=0x494da0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.268] FindClose (in: hFindFile=0x494da0 | out: hFindFile=0x494da0) returned 1 [0249.268] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.268] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\PresentationCore\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\presentationcore\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.269] GetLastError () returned 0x5 [0249.269] GetLastError () returned 0x5 [0249.269] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\PresentationCore\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\presentationcore\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.270] GetLastError () returned 0x5 [0249.270] GetLastError () returned 0x5 [0249.270] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\PresentationCore\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\presentationcore\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.270] GetLastError () returned 0x5 [0249.270] GetLastError () returned 0x5 [0249.270] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\PresentationCore\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494e60 [0249.270] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.270] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.270] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\PresentationCore\\3.0.0.0__31bf3856ad364e35\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\presentationcore\\3.0.0.0__31bf3856ad364e35\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.270] GetLastError () returned 0x5 [0249.270] GetLastError () returned 0x5 [0249.270] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\PresentationCore\\3.0.0.0__31bf3856ad364e35\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\presentationcore\\3.0.0.0__31bf3856ad364e35\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.271] GetLastError () returned 0x5 [0249.271] GetLastError () returned 0x5 [0249.271] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\PresentationCore\\3.0.0.0__31bf3856ad364e35\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\presentationcore\\3.0.0.0__31bf3856ad364e35\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.271] GetLastError () returned 0x5 [0249.271] GetLastError () returned 0x5 [0249.271] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\PresentationCore\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494d20 [0249.271] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.271] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.271] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.271] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\PresentationCore\\3.0.0.0__31bf3856ad364e35\\PresentationFontCache.exe.config" (normalized: "c:\\windows\\assembly\\gac_32\\presentationcore\\3.0.0.0__31bf3856ad364e35\\presentationfontcache.exe.config"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbcd8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.272] GetLastError () returned 0x5 [0249.272] GetLastError () returned 0x5 [0249.272] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.272] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.272] FindClose (in: hFindFile=0x494d20 | out: hFindFile=0x494d20) returned 1 [0249.272] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.272] FindClose (in: hFindFile=0x494e60 | out: hFindFile=0x494e60) returned 1 [0249.272] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.272] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\srmlib\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\srmlib\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.272] GetLastError () returned 0x5 [0249.272] GetLastError () returned 0x5 [0249.272] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\srmlib\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\srmlib\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.273] GetLastError () returned 0x5 [0249.273] GetLastError () returned 0x5 [0249.273] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\srmlib\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\srmlib\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.273] GetLastError () returned 0x5 [0249.273] GetLastError () returned 0x5 [0249.273] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\srmlib\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494f20 [0249.273] FindNextFileA (in: hFindFile=0x494f20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.273] FindNextFileA (in: hFindFile=0x494f20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.273] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\srmlib\\1.0.0.0__31bf3856ad364e35\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\srmlib\\1.0.0.0__31bf3856ad364e35\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.273] GetLastError () returned 0x5 [0249.273] GetLastError () returned 0x5 [0249.273] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\srmlib\\1.0.0.0__31bf3856ad364e35\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\srmlib\\1.0.0.0__31bf3856ad364e35\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.274] GetLastError () returned 0x5 [0249.274] GetLastError () returned 0x5 [0249.274] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\srmlib\\1.0.0.0__31bf3856ad364e35\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\srmlib\\1.0.0.0__31bf3856ad364e35\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.274] GetLastError () returned 0x5 [0249.274] GetLastError () returned 0x5 [0249.274] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\srmlib\\1.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494c60 [0249.274] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.274] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.274] FindNextFileA (in: hFindFile=0x494c60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.274] FindClose (in: hFindFile=0x494c60 | out: hFindFile=0x494c60) returned 1 [0249.274] FindNextFileA (in: hFindFile=0x494f20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.274] FindClose (in: hFindFile=0x494f20 | out: hFindFile=0x494f20) returned 1 [0249.274] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.274] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.data\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.275] GetLastError () returned 0x5 [0249.275] GetLastError () returned 0x5 [0249.275] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.data\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.275] GetLastError () returned 0x5 [0249.275] GetLastError () returned 0x5 [0249.276] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.data\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.276] GetLastError () returned 0x5 [0249.276] GetLastError () returned 0x5 [0249.276] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494920 [0249.276] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.276] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.276] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data\\2.0.0.0__b77a5c561934e089\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.data\\2.0.0.0__b77a5c561934e089\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.276] GetLastError () returned 0x5 [0249.276] GetLastError () returned 0x5 [0249.276] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data\\2.0.0.0__b77a5c561934e089\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.data\\2.0.0.0__b77a5c561934e089\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.277] GetLastError () returned 0x5 [0249.277] GetLastError () returned 0x5 [0249.277] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data\\2.0.0.0__b77a5c561934e089\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.data\\2.0.0.0__b77a5c561934e089\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.277] GetLastError () returned 0x5 [0249.277] GetLastError () returned 0x5 [0249.277] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494e60 [0249.277] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.277] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.277] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.277] FindClose (in: hFindFile=0x494e60 | out: hFindFile=0x494e60) returned 1 [0249.277] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.277] FindClose (in: hFindFile=0x494920 | out: hFindFile=0x494920) returned 1 [0249.277] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.277] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data.OracleClient\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.data.oracleclient\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.278] GetLastError () returned 0x5 [0249.278] GetLastError () returned 0x5 [0249.278] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data.OracleClient\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.data.oracleclient\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.278] GetLastError () returned 0x5 [0249.278] GetLastError () returned 0x5 [0249.278] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data.OracleClient\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.data.oracleclient\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.278] GetLastError () returned 0x5 [0249.278] GetLastError () returned 0x5 [0249.278] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data.OracleClient\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494fa0 [0249.278] FindNextFileA (in: hFindFile=0x494fa0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.278] FindNextFileA (in: hFindFile=0x494fa0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.279] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data.OracleClient\\2.0.0.0__b77a5c561934e089\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.data.oracleclient\\2.0.0.0__b77a5c561934e089\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.279] GetLastError () returned 0x5 [0249.279] GetLastError () returned 0x5 [0249.279] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data.OracleClient\\2.0.0.0__b77a5c561934e089\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.data.oracleclient\\2.0.0.0__b77a5c561934e089\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.279] GetLastError () returned 0x5 [0249.279] GetLastError () returned 0x5 [0249.279] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data.OracleClient\\2.0.0.0__b77a5c561934e089\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.data.oracleclient\\2.0.0.0__b77a5c561934e089\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.279] GetLastError () returned 0x5 [0249.279] GetLastError () returned 0x5 [0249.280] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Data.OracleClient\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494e20 [0249.280] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.280] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.280] FindNextFileA (in: hFindFile=0x494e20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.280] FindClose (in: hFindFile=0x494e20 | out: hFindFile=0x494e20) returned 1 [0249.280] FindNextFileA (in: hFindFile=0x494fa0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.280] FindClose (in: hFindFile=0x494fa0 | out: hFindFile=0x494fa0) returned 1 [0249.280] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.280] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.EnterpriseServices\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.enterpriseservices\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.281] GetLastError () returned 0x5 [0249.281] GetLastError () returned 0x5 [0249.281] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.EnterpriseServices\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.enterpriseservices\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.281] GetLastError () returned 0x5 [0249.281] GetLastError () returned 0x5 [0249.281] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.EnterpriseServices\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.enterpriseservices\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.282] GetLastError () returned 0x5 [0249.282] GetLastError () returned 0x5 [0249.282] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.EnterpriseServices\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494be0 [0249.282] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.282] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.282] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.EnterpriseServices\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.enterpriseservices\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.282] GetLastError () returned 0x5 [0249.282] GetLastError () returned 0x5 [0249.282] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.EnterpriseServices\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.enterpriseservices\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.282] GetLastError () returned 0x5 [0249.282] GetLastError () returned 0x5 [0249.283] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.EnterpriseServices\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.enterpriseservices\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.283] GetLastError () returned 0x5 [0249.283] GetLastError () returned 0x5 [0249.283] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.EnterpriseServices\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494fa0 [0249.283] FindNextFileA (in: hFindFile=0x494fa0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.283] FindNextFileA (in: hFindFile=0x494fa0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.283] FindNextFileA (in: hFindFile=0x494fa0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.283] FindNextFileA (in: hFindFile=0x494fa0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.283] FindClose (in: hFindFile=0x494fa0 | out: hFindFile=0x494fa0) returned 1 [0249.283] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.283] FindClose (in: hFindFile=0x494be0 | out: hFindFile=0x494be0) returned 1 [0249.283] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.284] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Printing\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.printing\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.284] GetLastError () returned 0x5 [0249.284] GetLastError () returned 0x5 [0249.284] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Printing\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.printing\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.285] GetLastError () returned 0x5 [0249.285] GetLastError () returned 0x5 [0249.285] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Printing\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.printing\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.285] GetLastError () returned 0x5 [0249.285] GetLastError () returned 0x5 [0249.285] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Printing\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494920 [0249.285] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.285] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.285] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Printing\\3.0.0.0__31bf3856ad364e35\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.printing\\3.0.0.0__31bf3856ad364e35\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.285] GetLastError () returned 0x5 [0249.285] GetLastError () returned 0x5 [0249.285] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Printing\\3.0.0.0__31bf3856ad364e35\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.printing\\3.0.0.0__31bf3856ad364e35\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.286] GetLastError () returned 0x5 [0249.286] GetLastError () returned 0x5 [0249.286] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Printing\\3.0.0.0__31bf3856ad364e35\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.printing\\3.0.0.0__31bf3856ad364e35\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.286] GetLastError () returned 0x5 [0249.286] GetLastError () returned 0x5 [0249.286] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Printing\\3.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494ce0 [0249.286] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.286] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.286] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.286] FindClose (in: hFindFile=0x494ce0 | out: hFindFile=0x494ce0) returned 1 [0249.286] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.286] FindClose (in: hFindFile=0x494920 | out: hFindFile=0x494920) returned 1 [0249.286] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.286] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Transactions\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.transactions\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.287] GetLastError () returned 0x5 [0249.287] GetLastError () returned 0x5 [0249.287] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Transactions\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.transactions\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.287] GetLastError () returned 0x5 [0249.287] GetLastError () returned 0x5 [0249.287] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Transactions\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.transactions\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.288] GetLastError () returned 0x5 [0249.288] GetLastError () returned 0x5 [0249.288] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Transactions\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494920 [0249.288] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.288] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.288] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Transactions\\2.0.0.0__b77a5c561934e089\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.transactions\\2.0.0.0__b77a5c561934e089\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.288] GetLastError () returned 0x5 [0249.288] GetLastError () returned 0x5 [0249.288] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Transactions\\2.0.0.0__b77a5c561934e089\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.transactions\\2.0.0.0__b77a5c561934e089\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.289] GetLastError () returned 0x5 [0249.289] GetLastError () returned 0x5 [0249.289] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Transactions\\2.0.0.0__b77a5c561934e089\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.transactions\\2.0.0.0__b77a5c561934e089\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.289] GetLastError () returned 0x5 [0249.289] GetLastError () returned 0x5 [0249.289] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Transactions\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494ea0 [0249.289] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.289] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.289] FindNextFileA (in: hFindFile=0x494ea0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.289] FindClose (in: hFindFile=0x494ea0 | out: hFindFile=0x494ea0) returned 1 [0249.289] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.289] FindClose (in: hFindFile=0x494920 | out: hFindFile=0x494920) returned 1 [0249.289] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.289] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Web\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.web\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.290] GetLastError () returned 0x5 [0249.290] GetLastError () returned 0x5 [0249.290] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Web\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.web\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.290] GetLastError () returned 0x5 [0249.290] GetLastError () returned 0x5 [0249.290] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Web\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.web\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.290] GetLastError () returned 0x5 [0249.290] GetLastError () returned 0x5 [0249.290] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Web\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x4948a0 [0249.290] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.290] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.290] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Web\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.web\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.291] GetLastError () returned 0x5 [0249.291] GetLastError () returned 0x5 [0249.291] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Web\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.web\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.291] GetLastError () returned 0x5 [0249.291] GetLastError () returned 0x5 [0249.291] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Web\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_32\\system.web\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.291] GetLastError () returned 0x5 [0249.291] GetLastError () returned 0x5 [0249.291] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_32\\System.Web\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494be0 [0249.291] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.291] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.292] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.292] FindClose (in: hFindFile=0x494be0 | out: hFindFile=0x494be0) returned 1 [0249.292] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.292] FindClose (in: hFindFile=0x4948a0 | out: hFindFile=0x4948a0) returned 1 [0249.292] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 0 [0249.292] FindClose (in: hFindFile=0x4949a0 | out: hFindFile=0x4949a0) returned 1 [0249.292] FindNextFileA (in: hFindFile=0x494ba0, lpFindFileData=0x3ddc60 | out: lpFindFileData=0x3ddc60) returned 1 [0249.292] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_64\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dcfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.296] GetLastError () returned 0x5 [0249.296] GetLastError () returned 0x5 [0249.296] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_64\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dcfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.300] GetLastError () returned 0x5 [0249.300] GetLastError () returned 0x5 [0249.300] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_64\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dcfd4, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.305] GetLastError () returned 0x5 [0249.305] GetLastError () returned 0x5 [0249.305] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\*", lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 0x494d60 [0249.305] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.305] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.305] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\CustomMarshalers\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_64\\custommarshalers\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.307] GetLastError () returned 0x5 [0249.307] GetLastError () returned 0x5 [0249.307] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\CustomMarshalers\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_64\\custommarshalers\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.307] GetLastError () returned 0x5 [0249.307] GetLastError () returned 0x5 [0249.307] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\CustomMarshalers\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_64\\custommarshalers\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.307] GetLastError () returned 0x5 [0249.307] GetLastError () returned 0x5 [0249.307] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\CustomMarshalers\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494d20 [0249.307] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.307] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.307] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_64\\custommarshalers\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.308] GetLastError () returned 0x5 [0249.308] GetLastError () returned 0x5 [0249.308] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_64\\custommarshalers\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.308] GetLastError () returned 0x5 [0249.308] GetLastError () returned 0x5 [0249.308] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_64\\custommarshalers\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.308] GetLastError () returned 0x5 [0249.308] GetLastError () returned 0x5 [0249.308] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494a20 [0249.308] FindNextFileA (in: hFindFile=0x494a20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.309] FindNextFileA (in: hFindFile=0x494a20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.309] FindNextFileA (in: hFindFile=0x494a20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.309] FindClose (in: hFindFile=0x494a20 | out: hFindFile=0x494a20) returned 1 [0249.309] FindNextFileA (in: hFindFile=0x494d20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.309] FindClose (in: hFindFile=0x494d20 | out: hFindFile=0x494d20) returned 1 [0249.309] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.309] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\ISymWrapper\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_64\\isymwrapper\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.309] GetLastError () returned 0x5 [0249.309] GetLastError () returned 0x5 [0249.310] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\ISymWrapper\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_64\\isymwrapper\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.310] GetLastError () returned 0x5 [0249.310] GetLastError () returned 0x5 [0249.310] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\ISymWrapper\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_64\\isymwrapper\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.310] GetLastError () returned 0x5 [0249.310] GetLastError () returned 0x5 [0249.310] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\ISymWrapper\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x4948a0 [0249.310] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.310] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.310] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_64\\isymwrapper\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.311] GetLastError () returned 0x5 [0249.311] GetLastError () returned 0x5 [0249.311] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_64\\isymwrapper\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.311] GetLastError () returned 0x5 [0249.311] GetLastError () returned 0x5 [0249.311] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_64\\isymwrapper\\2.0.0.0__b03f5f7f11d50a3a\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.311] GetLastError () returned 0x5 [0249.311] GetLastError () returned 0x5 [0249.311] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494be0 [0249.311] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.311] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.311] FindNextFileA (in: hFindFile=0x494be0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.311] FindClose (in: hFindFile=0x494be0 | out: hFindFile=0x494be0) returned 1 [0249.311] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.312] FindClose (in: hFindFile=0x4948a0 | out: hFindFile=0x4948a0) returned 1 [0249.312] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.312] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Ink\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.ink\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.312] GetLastError () returned 0x5 [0249.312] GetLastError () returned 0x5 [0249.312] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Ink\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.ink\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.312] GetLastError () returned 0x5 [0249.312] GetLastError () returned 0x5 [0249.312] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Ink\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.ink\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.313] GetLastError () returned 0x5 [0249.313] GetLastError () returned 0x5 [0249.313] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Ink\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x4948a0 [0249.313] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.313] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.313] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.ink\\6.1.0.0__31bf3856ad364e35\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.313] GetLastError () returned 0x5 [0249.313] GetLastError () returned 0x5 [0249.313] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.ink\\6.1.0.0__31bf3856ad364e35\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.313] GetLastError () returned 0x5 [0249.313] GetLastError () returned 0x5 [0249.314] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.ink\\6.1.0.0__31bf3856ad364e35\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.314] GetLastError () returned 0x5 [0249.314] GetLastError () returned 0x5 [0249.314] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494e60 [0249.314] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.314] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.314] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.314] FindClose (in: hFindFile=0x494e60 | out: hFindFile=0x494e60) returned 1 [0249.314] FindNextFileA (in: hFindFile=0x4948a0, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.314] FindClose (in: hFindFile=0x4948a0 | out: hFindFile=0x4948a0) returned 1 [0249.314] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.314] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Interop.Security.AzRoles\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.interop.security.azroles\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.315] GetLastError () returned 0x5 [0249.315] GetLastError () returned 0x5 [0249.315] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Interop.Security.AzRoles\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.interop.security.azroles\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.315] GetLastError () returned 0x5 [0249.315] GetLastError () returned 0x5 [0249.315] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Interop.Security.AzRoles\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.interop.security.azroles\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.316] GetLastError () returned 0x5 [0249.316] GetLastError () returned 0x5 [0249.316] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Interop.Security.AzRoles\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494f20 [0249.316] FindNextFileA (in: hFindFile=0x494f20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.316] FindNextFileA (in: hFindFile=0x494f20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.316] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.interop.security.azroles\\2.0.0.0__31bf3856ad364e35\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.316] GetLastError () returned 0x5 [0249.316] GetLastError () returned 0x5 [0249.316] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.interop.security.azroles\\2.0.0.0__31bf3856ad364e35\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.317] GetLastError () returned 0x5 [0249.317] GetLastError () returned 0x5 [0249.317] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.interop.security.azroles\\2.0.0.0__31bf3856ad364e35\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.317] GetLastError () returned 0x5 [0249.317] GetLastError () returned 0x5 [0249.317] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494ce0 [0249.317] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.317] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.317] FindNextFileA (in: hFindFile=0x494ce0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.317] FindClose (in: hFindFile=0x494ce0 | out: hFindFile=0x494ce0) returned 1 [0249.317] FindNextFileA (in: hFindFile=0x494f20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.317] FindClose (in: hFindFile=0x494f20 | out: hFindFile=0x494f20) returned 1 [0249.317] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.317] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Transactions.Bridge.Dtc\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.transactions.bridge.dtc\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.318] GetLastError () returned 0x5 [0249.318] GetLastError () returned 0x5 [0249.318] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Transactions.Bridge.Dtc\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.transactions.bridge.dtc\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.318] GetLastError () returned 0x5 [0249.318] GetLastError () returned 0x5 [0249.318] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Transactions.Bridge.Dtc\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.transactions.bridge.dtc\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.319] GetLastError () returned 0x5 [0249.319] GetLastError () returned 0x5 [0249.319] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Transactions.Bridge.Dtc\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494920 [0249.319] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.319] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.319] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.transactions.bridge.dtc\\3.0.0.0__b03f5f7f11d50a3a\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.319] GetLastError () returned 0x5 [0249.319] GetLastError () returned 0x5 [0249.319] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.transactions.bridge.dtc\\3.0.0.0__b03f5f7f11d50a3a\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.319] GetLastError () returned 0x5 [0249.319] GetLastError () returned 0x5 [0249.319] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_64\\microsoft.transactions.bridge.dtc\\3.0.0.0__b03f5f7f11d50a3a\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.320] GetLastError () returned 0x5 [0249.320] GetLastError () returned 0x5 [0249.320] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x4949a0 [0249.320] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.320] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.320] FindNextFileA (in: hFindFile=0x4949a0, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.320] FindClose (in: hFindFile=0x4949a0 | out: hFindFile=0x4949a0) returned 1 [0249.320] FindNextFileA (in: hFindFile=0x494920, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.320] FindClose (in: hFindFile=0x494920 | out: hFindFile=0x494920) returned 1 [0249.320] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.320] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\MSBuild\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_64\\msbuild\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.321] GetLastError () returned 0x5 [0249.321] GetLastError () returned 0x5 [0249.321] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\MSBuild\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_64\\msbuild\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.321] GetLastError () returned 0x5 [0249.321] GetLastError () returned 0x5 [0249.321] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\MSBuild\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_64\\msbuild\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.321] GetLastError () returned 0x5 [0249.321] GetLastError () returned 0x5 [0249.321] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\MSBuild\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494f20 [0249.322] FindNextFileA (in: hFindFile=0x494f20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.322] FindNextFileA (in: hFindFile=0x494f20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.322] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_64\\msbuild\\3.5.0.0__b03f5f7f11d50a3a\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.322] GetLastError () returned 0x5 [0249.322] GetLastError () returned 0x5 [0249.322] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_64\\msbuild\\3.5.0.0__b03f5f7f11d50a3a\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.322] GetLastError () returned 0x5 [0249.322] GetLastError () returned 0x5 [0249.322] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_64\\msbuild\\3.5.0.0__b03f5f7f11d50a3a\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.323] GetLastError () returned 0x5 [0249.323] GetLastError () returned 0x5 [0249.323] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494b20 [0249.323] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.323] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.323] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.323] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\msbuild.exe.config" (normalized: "c:\\windows\\assembly\\gac_64\\msbuild\\3.5.0.0__b03f5f7f11d50a3a\\msbuild.exe.config"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbcd8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.324] GetLastError () returned 0x5 [0249.324] GetLastError () returned 0x5 [0249.324] FindNextFileA (in: hFindFile=0x494b20, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.324] FindClose (in: hFindFile=0x494b20 | out: hFindFile=0x494b20) returned 1 [0249.324] FindNextFileA (in: hFindFile=0x494f20, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.324] FindClose (in: hFindFile=0x494f20 | out: hFindFile=0x494f20) returned 1 [0249.324] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.324] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\mscorlib\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.328] GetLastError () returned 0x5 [0249.328] GetLastError () returned 0x5 [0249.328] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\mscorlib\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.328] GetLastError () returned 0x5 [0249.328] GetLastError () returned 0x5 [0249.328] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\mscorlib\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.328] GetLastError () returned 0x5 [0249.328] GetLastError () returned 0x5 [0249.328] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\mscorlib\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494a60 [0249.328] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.329] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 1 [0249.329] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.334] GetLastError () returned 0x5 [0249.334] GetLastError () returned 0x5 [0249.334] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.338] GetLastError () returned 0x5 [0249.338] GetLastError () returned 0x5 [0249.338] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dbd14, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.343] GetLastError () returned 0x5 [0249.343] GetLastError () returned 0x5 [0249.343] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0x494e60 [0249.343] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.343] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.343] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.343] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.343] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.343] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.343] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.344] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.344] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.344] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.344] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.344] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.344] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.344] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.344] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 1 [0249.344] FindNextFileA (in: hFindFile=0x494e60, lpFindFileData=0x3dc040 | out: lpFindFileData=0x3dc040) returned 0 [0249.344] FindClose (in: hFindFile=0x494e60 | out: hFindFile=0x494e60) returned 1 [0249.344] FindNextFileA (in: hFindFile=0x494a60, lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0 [0249.345] FindClose (in: hFindFile=0x494a60 | out: hFindFile=0x494a60) returned 1 [0249.345] FindNextFileA (in: hFindFile=0x494d60, lpFindFileData=0x3dd300 | out: lpFindFileData=0x3dd300) returned 1 [0249.345] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\PresentationCore\\CRYPTOID_BLOCKED.txt" (normalized: "c:\\windows\\assembly\\gac_64\\presentationcore\\cryptoid_blocked.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.346] GetLastError () returned 0x5 [0249.346] GetLastError () returned 0x5 [0249.346] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\PresentationCore\\CRYPTOID_HELP.txt" (normalized: "c:\\windows\\assembly\\gac_64\\presentationcore\\cryptoid_help.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.346] GetLastError () returned 0x5 [0249.346] GetLastError () returned 0x5 [0249.346] CreateFileW (lpFileName="C:\\\\Windows\\assembly\\GAC_64\\PresentationCore\\CRYPTOID_MESSAGE.txt" (normalized: "c:\\windows\\assembly\\gac_64\\presentationcore\\cryptoid_message.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x3dc674, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0249.346] GetLastError () returned 0x5 [0249.346] GetLastError () returned 0x5 [0249.346] FindFirstFileA (in: lpFileName="C:\\\\Windows\\assembly\\GAC_64\\PresentationCore\\*", lpFindFileData=0x3dc9a0 | out: lpFindFileData=0x3dc9a0) returned 0x494da0 [0250.640] GetLastError () returned 0x5 [0250.640] GetLastError () returned 0x5 [0250.640] GetLastError () returned 0x5 [0250.640] GetLastError () returned 0x5 [0250.641] GetLastError () returned 0x5 [0250.641] GetLastError () returned 0x5 [0259.180] CloseHandle (hObject=0x94) returned 1 [0259.181] CloseHandle (hObject=0x94) returned 1 [0259.183] CloseHandle (hObject=0x94) returned 1 [0260.043] CloseHandle (hObject=0x98) returned 1 [0260.044] CloseHandle (hObject=0x98) returned 1 [0260.046] CloseHandle (hObject=0x98) returned 1 [0262.159] CloseHandle (hObject=0x94) returned 1 [0262.160] CloseHandle (hObject=0x94) returned 1 [0262.162] CloseHandle (hObject=0x94) returned 1 [0262.848] CloseHandle (hObject=0x94) returned 1 [0262.849] CloseHandle (hObject=0x94) returned 1 [0262.851] CloseHandle (hObject=0x94) returned 1 [0265.645] CloseHandle (hObject=0x98) returned 1 [0265.646] CloseHandle (hObject=0x98) returned 1 [0265.648] CloseHandle (hObject=0x98) returned 1 [0265.846] CloseHandle (hObject=0x94) returned 1 [0265.848] CloseHandle (hObject=0x94) returned 1 [0265.849] CloseHandle (hObject=0x94) returned 1 [0266.251] CloseHandle (hObject=0x94) returned 1 [0266.253] CloseHandle (hObject=0x94) returned 1 [0266.254] CloseHandle (hObject=0x94) returned 1 [0266.693] CloseHandle (hObject=0x90) returned 1 [0266.694] CloseHandle (hObject=0x90) returned 1 [0266.709] CloseHandle (hObject=0x90) returned 1 [0266.710] CloseHandle (hObject=0x90) returned 1 [0266.711] CloseHandle (hObject=0x90) returned 1 [0266.712] CloseHandle (hObject=0x90) returned 1 [0266.714] CloseHandle (hObject=0x90) returned 1 [0266.715] CloseHandle (hObject=0x90) returned 1 [0266.718] CloseHandle (hObject=0x90) returned 1 Thread: id = 5 os_tid = 0x538